Is the data encryption standard a group?
Proc. of a workshop on the theory and application of cryptographic techniques on Advances in cryptology---EUROCRYPT '85
Security for computer networks: and introduction to data security in teleprocessing and electronic funds transfer (2nd ed.)
Cryptography and data security
Cryptography and data security
| Hi-index | 0.00 |
DES is used almost universally by financial institutions (Fls) around the world. For the foreseeable future there are no alternatives to its continued use. Within ten years unmodified single-key DES will be breakable for a cost of about $3,500 per solution in under one day. Many financial systems which currently rely on single-key DES are therefore becoming vulnerable to attack.Despite the impact of breaking DES, the misconception that an FI's exposure is limited to the dollar values of particular short-lived transactions may make users unwilling to undertake urgent remedial measures. They may be prepared to tolerate risks they perceive as limited and unrealistic. This view ignores the danger that a breach of key management security poses to the system as a whole.Until a new encryption standard emerges, the exposure and consequences can be avoided by the adoption of double-length keys for DES. This is technically and economically feasible. Double-length keys and unique keys per transaction should be implemented in financial systems as soon as possible.