undefined | Better HN

0 pointskevin_thibedeau5y ago0 comments

3DES is still military grade.

0 comments

No it's not. It stopped being approved for usage by NIST a few years ago.

Really? 3DES still appears here, https://csrc.nist.gov/projects/block-cipher-techniques, with DES and Skipjack being called out as deprecated.

user59944615y ago

That page says that 3DES is prohibited from usage in new applications and is prohibited for encrypting more than 1 GB of data, since 2017.

The attached documents have additional information on implementation and (non) usage, including deadline to migrate legacy military systems. It's sadly quite cumbersome to go through the tens of PDF to find the relevant information.

kevin_thibedeauOP5y ago

112-bit keys are still allowed precisely because of 3DES.

j / k navigate · click thread line to collapse

0 comments

user59944615y ago

No it's not. It stopped being approved for usage by NIST a few years ago.

Twirrim5y ago

Really? 3DES still appears here, https://csrc.nist.gov/projects/block-cipher-techniques, with DES and Skipjack being called out as deprecated.

user59944615y ago

That page says that 3DES is prohibited from usage in new applications and is prohibited for encrypting more than 1 GB of data, since 2017.

kevin_thibedeauOP5y ago

112-bit keys are still allowed precisely because of 3DES.

j / k navigate · click thread line to collapse