🚀 go-pugleaf

In <1992Apr15.014849.16768@cs.cornell.edu>, wayner@cs.cornell.edu (Peter
Wayner)
writes:

> Does anyone have any good information on the various hardware
> implementation of DES chips that are floating around on the market?
> I'm curious about the price and speed for the usual reasons. 

I built some stuff using a chip from Cryptech in Brussels which I can't
recommend too highly. It is a DES chip embedded in a microprocessor with
a command set which lets you do all major modes (ECB, CBC and CFB) with
single or double keys and pipelining, off a bus of 8, 16 or 32 bits, with
a throughput of typically 6Mbit/sec.

About the only instruction they don't have is `increment key by 1, encrypt
register X and compare with register Y' (guess why?). Anyway they used to
be on +322 725 4770. The sales guy I dealt with has left now so you'd have 
to ask around from someone to talk to. Their chief scientist is (was?) 
Frank Hoornaert who gave a paper on this chip at Eurocrypt 87.

This is now, as far as I know, the only non-US manufacturer of fast DES 
chips (anyone can make a slow DES chip from a microcontroller). The other,
now discontinued, manufacturer was Robotron of East Germany, who delivered
large quantities of DES chips to the Soviet armed forces (supposedly for
incorporation in the hard disk controllers of PC-XT cloneskies).

Ross

In article <1992Apr15.014849.16768@cs.cornell.edu> 
	 wayner@cs.cornell.edu (Peter Wayner) writes:
>
>Does anyone have any good information on the various hardware
>implementation of DES chips that are floating around on the market?
>I'm curious about the price and speed for the usual reasons. 

Western Digital makes one.  BTW, hardware is the *only* way DES is
implemented.  At least according to the spec.
-- 
Michael Sierchio                               TRW Financial Systems
kudzu@tfs.com                                     1947 Center Street
                                             Berkeley, CA 94704-1105
(MKS2)                                                  510.704.3380

wayner@cs.cornell.edu (Peter Wayner) writes:

>Does anyone have any good information on the various hardware
>implementation of DES chips that are floating around on the market?
>I'm curious about the price and speed for the usual reasons. 

Here the (european !) chips I know:

1. Cryptech CRY12C102

	22.5Mbit/s according to Data Sheet, with 32 Bit interface

	We use this one, because it was the only one available
	when we started the project. No problems !

2. Pijnenburg PCC100

	20Mbit/s according to Data Sheet

	Address: PIJNENBURG B.V., Boxtelswweg 26, NL-5261 NE Vught,
	The Netherlands

3. INFOSYS DES Chip (Germany)

	S-Boxes must be loaded by software. So you can modify the
	Algorithm.

	Sorry, I don't have the data sheet handy. Please E-Mail me
	if you need further information.

Regards,

	Christian Franke
	Aachen University of Technology
	Lehrstuhl fuer Informatik I
	Ahornstrasse 55
	W-5100 Aachen
	Germany
	Tel.: 0241 / 80-21111

	E-Mail : franke@informatik.rwth-aachen.de

In article <1992Apr16.010949.24520@tfs.com>, kudzu@tfs.com (Michael Sierchio) writes...
>In article <1992Apr15.014849.16768@cs.cornell.edu> 
>>Does anyone have any good information on the various hardware
>>implementation of DES chips that are floating around on the market?
>Western Digital makes one.  BTW, hardware is the *only* way DES is
>implemented.  At least according to the spec.
>-- 
>Michael Sierchio                               TRW Financial Systems

hmm... atleast according to unix man-pages: the des command offers a
switch to fall back to software implemented des, just incase you dont
have to hardware installed.

Jm.

-------------------------------------------------------------------------------
Jeff Murphy. SUNY at Buffalo Network Repair and Installation. OpnSmurf@UBVMS
Standard disclaimers apply...|=================================================
-----------------------------| "Die Now!"

wayner@cs.cornell.edu (Peter Wayner) writes:

>Does anyone have any good information on the various hardware
>implementation of DES chips that are floating around on the market?
>I'm curious about the price and speed for the usual reasons. 

Here the (european !) chips I know:

1. Cryptech CRY12C102

	22.5Mbit/s according to Data Sheet, with 32 Bit interface

	We use this one, because it was the only one available
	when we started the project. No problems !

2. Pijnenburg PCC100

	20Mbit/s according to Data Sheet

	Address: PIJNENBURG B.V., Boxtelswweg 26, NL-5261 NE Vught,
	The Netherlands

3. INFOSYS DES Chip (Germany)

	S-Boxes must be loaded by software. So you can modify the
	Algorithm.

	Sorry, I don't have the data sheet handy. Please E-Mail me
	if you need further information.

Regards,

	Christian Franke
	Aachen University of Technology
	Lehrstuhl fuer Informatik I
	Ahornstrasse 55
	W-5100 Aachen
	Germany
	Tel.: 0241 / 80-21111

	E-Mail : franke@informatik.rwth-aachen.de

In article <1992Apr16.075856.1768@acsu.buffalo.edu> opnsmurf@ubvmsb.cc.buffalo.edu (Da Smurf) writes:
>>BTW, hardware is the *only* way DES is
>>implemented.  At least according to the spec.

>hmm... atleast according to unix man-pages: the des command offers a
>switch to fall back to software implemented des, just incase you dont
>have to hardware installed.

I think point was that NIST does not recognize general purpose
software implementations of DES as meeting the *official* requirements
of the spec, even if they produce exactly the same results. The reason
has to do with the relative ease that a software DES could be
maliciously hacked, or its internal state (e.g., key vectors)
surreptitiously read out by exploiting holes in the host computer's
operating system. DES implemented as ROM firmware in a single-chip
micro *would* meet the test, as this would be much harder to subvert.

This certainly doesn't prevent anyone from using software DES (which
is more properly called "DEA", for Data Encryption Algorithm) if they
don't care what NIST says. But it's probably worth thinking about the
reasons why they have this policy, if only to be aware of the possible
threats in your own situation. E.g., how do you *know* that somebody
hasn't hacked the 'des' command on your workstation to record keys?

Phil

In article <1992Apr16.165945.23208@qualcomm.com>, karn@chicago.qualcomm.com (Phil Karn) writes...
>In article <1992Apr16.075856.1768@acsu.buffalo.edu> opnsmurf@ubvmsb.cc.buffalo.edu (Da Smurf) writes:
>threats in your own situation. E.g., how do you *know* that somebody
>hasn't hacked the 'des' command on your workstation to record keys?
> 
>Phil

	Having the source (and going through it) is one way to be sure...


Jm.