🚀 go-pugleaf

In article <6703@tuegate.tue.nl>, bartjan@blade.stack.urc.tue.nl (Bartjan Wattel) writes:
|> Hi,
|> 
|> This question sort of belongs to my other question(s) in "Enlarging key size
|> of the DES".
|> 
|> Does anybody know publications about multiple-round DES and/or implementations
|> of it ?
|> 
|> If someone has other interesting info about multiple-round DES, all information
|> is welcome !!
|> 
|> Thanks in advance,
|> 
|> Bartjan Wattel at Eindhoven University of Technology, the Netherlands
|> (Email: bartjan@blade.stack.urc.tue.nl)
|> --------------------------------------------------------------------------------
|> 
|>                     You may be insane, but you're not crazy.

Merkle and Hellman are said to recommend the following:

   ciphertext =  DESEncrypt(k1,DESDecrypt(k2,DESEncrypt(k3,plaintext)));

and that this step be substituted wherever one does  
   
   ciphertext = DESEncrypt(kx,plaintext);

today.

I don't know exactly how much additional security this gives.  For instance,
there are known problems with the obvious:

   DESEncrypt(k1,DESEncrypt(k2,plaintext))
   
and claims of problems with:

   DESEncrypt(k1,DESDecrypt(k2,DESEncrypt(k1,plaintext))) 

(I say "claim" in the second case only because I haven't had time to read
that particular literature :-) ).  In the first case, at least, a table of
2 to the 67 bytes will keep the decryption in the range of 2 to the 55th 
average iterations.

Based on those issues, I would guestimate that Merkle & Hellman's security 
is probably around 2 to the 112 iterations, assuming no shortcut is found 
for the underlying DES proper or for the joint cipher.  Does anyone know
how many iterations Merkle and Hellman claim for the scheme?

This is the simplest approach to increasing DES key size I know of and it
is "off the shelf" with a correct protocol in the implementation of it.

-- 
   Larry W. Loen        |  My Opinions are decidedly my own, so please
                        |  do not attribute them to my employer

In <1992Dec16.205932.21909@rchland.ibm.com> lwloen@rchland.vnet.ibm.com (Larry Loen) writes:

>In article <6703@tuegate.tue.nl>, bartjan@blade.stack.urc.tue.nl (Bartjan Wattel) writes:
>|> If someone has other interesting info about multiple-round DES, all information
>|> is welcome !!
>
>This is the simplest approach to increasing DES key size I know of and it
>is "off the shelf" with a correct protocol in the implementation of it.
>
>-- 
>   Larry W. Loen        |  My Opinions are decidedly my own, so please
>                        |  do not attribute them to my employer

See ftp@ghost.dsi.unimi.it:/pub/crypt/d3des.tar.Z.

I quote from the README:
--
### d3des.tar.Z
Yet another DES implementation. But this one offers your the possibility
of making double or triple DES encipherment.
Author: Richard Outerbridge (GEnie : OUTER; CIS : [71755,204]),
Graven Imagery, 1992.
--

Regards,
David
-- 
David Vincenzetti, system administrator
Department of Computer Science,         Email: vince@ghost.dsi.unimi.it
via Comelico 41, 20135 Milan, ITALY     Phone: ++39 2 55006 39{1,2}
$PUBLIC KEY available by finger(1)$     Fax  : ++39 2 55006 373

In article <1992Dec18.182321.8552@ghost.dsi.unimi.it>, vince@ghost (David Vincenzetti) writes:
>See ftp@ghost.dsi.unimi.it:/pub/crypt/d3des.tar.Z.

Stuff from ghost.dsi.unimi.it is also weekly copied to
/pub/crypt/ghost.dsi.unimi.ti at nic.funet.fi.

//Jyrki