0

If I am going to use a master key to generate a session key, the master key must be "stronger" than the session key.

For instance, I should not be distributing a 128-bit AES keys with a 56-bit DES key.

Why?

  • It seems you completely changed this question into a new one. Please dont do that. Instead ask a new question. – Anders May 29 '16 at 11:40
  • @Anders Sorry about this,i am still quite new to the forum – Ricky May 29 '16 at 11:50
3

I should not be distributing a 128-bit AES keys with a 56-bit DES key. Why?

If you think about this, it is trivially obvious: anyone can obtain the 128 bit key by brute forcing the 56 bit key that you distribute it under. The performance of your security is defined by the weakest point in the system.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.