3 ms·
It means you should not use it for anything important, because it can be decrypted by the public with little effort. If you look back, it has been this way for
by 1970-01-01 9mo ago
It means you should not use it for anything important, because it can be decrypted by the public with little effort. If you look back, it has been this way for quite awhile. My gripe is with the clickbait title 'Break Me If You Can'
https://nvd.nist.gov/vuln/detail/cve-2016-2183 https://nvd.nist.gov/vuln/detail/cve-2016-2183
- tptacek 9mo agoHow exactly would you decrypt a 3DES ciphertext "with little effort"?
- 1970-01-01 9mo agoIt's supported in hashcat
- some_furry 9mo agoIs this a bit?
- 1970-01-01 9mo agoHave you tried it?
- some_furry 9mo agoWe're talking about symmetric ciphers and you're talking about password cracking software. Triple-DES has 168 bit keys. Even if you use a meet-in-the-middle attack, your attack cost has an exponent of 112 (with an associated memory cost with an exponent of 88). That's not practically exploitable today. If you think I'm wrong, here's a single block message encrypted with 3DES, then hex-encoded. Have fun: 924db449f52ea976 But really, the bigger problem is Sweet32.
- tostrstrudel 9mo agoBREAKMEIFYOUCAN! is the default factory key programmed into every MIFARE Ultralight C chip by NXP.
- 1970-01-01 9mo agoOk that makes much more sense.