2 ms·
What's wrong with 3DES?
by tedunangst 2y ago
What's wrong with 3DES?
- hiatus 2y agohttps://csrc.nist.gov/News/2017/Update-to-Current-Use-and-Deprecation-of-TDEA https://csrc.nist.gov/News/2017/Update-to-Current-Use-and-De...
- anotherhue 2y agoIt's been slowly phased out for some time, so to see it appear in a net-new project is highly unusual. Here's just a random example of it being removed back in 2016 https://cvsweb.openbsd.org/src/usr.bin/ssh/myproposal.h?rev=1.52&content-type=text/x-cvsweb-markup https://cvsweb.openbsd.org/src/usr.bin/ssh/myproposal.h?rev=...
- ziddoap 2y ago>Sweet32: Birthday attacks on 64-bit block ciphers in TLS and OpenVPN >CVE-2016-2183, CVE-2016-6329 >[...] short block size makes a block cipher vulnerable to birthday attacks, even if there are no cryptographic attacks against the block cipher itself. We observe that such attacks have now become practical for the common usage of 64-bit block ciphers >We show that a network attacker who can monitor a long-lived Triple-DES HTTPS connection between a web browser and a website can recover secure HTTP cookies https://sweet32.info/ https://sweet32.info/