cnsppch06Contemporary Symmetric Ciphers概要1.pptVIP

Guide to Information Security Instructor: Hou Mengbo Email: houmb AT Office: Information Security Research Group Chapter 6 – Contemporary Symmetric Ciphersand Others 6.1 Multiple Encryption 3-DES clear a replacement for DES was needed theoretical attacks that can break it demonstrated exhaustive key search attacks AES is a new cipher alternative prior to this alternative was to use multiple encryption with DES implementations Triple-DES is the chosen form Double -DES? why not Double-DES? Although it is not same as single DES. meet-in-the-middle attack Note: all mapping for 64bits plaintext, the number of 1-1 mapping is (264)!,while 56 bits key can only reach 256 ,so 2-DES may run. It works whenever use a cipher twice since X = EK1[P] = DK2[C] attack by encrypting P with all keys and store then decrypt C with keys and match X value can show takes O(256) steps (note:when varifying the correct key, because key space is 2112,so for plaintext, the number of key for generating the exact ciphertext is 2112/264=248 , so you should continue to try another p/c pair…) Triple-DES with Two-Keys hence must use 3 encryptions would seem to need 3 distinct keys but can use 2 keys with E-D-E sequence C = EK1[DK2[EK1[P]]] if K1=K2 then can work with single DES standardized in ANSI X9.17 ISO8732 no current known practical attacks Triple-DES with Three-Keys although are no practical attacks on two-key Triple-DES have some indications can use Triple-DES with Three-Keys to avoid even these C = EK3[DK2[EK1[P]]] has been adopted by some Internet applications, eg PGP, S/MIME Triple-DES 6.2 Modes of Operation block ciphers encrypt fixed size blocks eg. DES encrypts 64-bit blocks, with 56-bit key need way to use in practise, given usually have arbitrary amount of information to encrypt four were defined for DES in ANSI standard ANSI X3.106-1983 Modes of Use subsequently now have 5 for DES and AES have block and stream modes Electronic Codebook Book (ECB) me