Questions tagged [3des]

3DES is an encyption algorithm that consist of three rounds of DES encryption.

Filter by
Sorted by
Tagged with
0 votes
0 answers
84 views

The hidden perils of trying to handle bad rare outcomes

I vaguely remember some story about some cipher (I think it was 3DES) having some "issue" where if the key happened to be especially bad (like 0x00000...) then the resulting encryption ...
user avatar
1 vote
1 answer
504 views

How to get Future Keys (Session Key) from IPEK for decryption data?

I'm new to DUKPT, so I'm not entirely clear about DUKPT and HSM. Right now, I'm trying to decrypt data (PAN number) from terminal. So far, when I receive KSN and encrypted data, I understand that I ...
user avatar
3 votes
3 answers
254 views

Are encrypted databases secure against all attacks?

If I use a database encryption package for oracle like dbms_crypto, would this be vulnerable to any attacks? I know that it uses algorithms like 3DES, AES, etc. These are all thigns that you can use ...
user avatar
  • 63
0 votes
0 answers
90 views

How secure is this scheme?

Introduction of the cryptosystem Let's say we have a system with a central server SRV that is considered secure (communication with this server is secured too with TLS). Then let's say we have many ...
user avatar
  • 119
2 votes
1 answer
387 views

3DES supported in application although disabled in Windows

Can users actually use the 3DES cipher to connect to a Tomcat web server, if the 3DES cipher has been disabled via registry keys in Windows: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\...
user avatar
3 votes
2 answers
7k views

How to generate the most secure private key? [closed]

I need to generate the most secure private key. Usually I use a command: openssl genrsa -des3 -out mykey.key 2048 Is triple DES secure enough? Is 2048 large enough? Are there any other ways to ...
user avatar
  • 1,085
4 votes
1 answer
148 views

Can a MAC be used as an irreversible PCI Token?

I'm looking at implementing a PCI token generation process based on a MAC code obtained from the PAN. This would be an irreversible token. The method I have in mind seems OK to me, but I'm not quite ...
user avatar
0 votes
1 answer
653 views

SSH most common symmetric encryption algorithm in 2018

What is the most common symmetric encryption algorithm for encrypting data between two machines with SSH in 2018? I have attempted to find this out but I generally come across outdated blogs. I ...
user avatar
  • 189
1 vote
2 answers
1k views

Why does tls_version "TLS 1.2" from howsmyssl rate "Probably Okay" in Chrome on Windows 10 but "Bad" in IE11 on Windows 7?

I'm implementing an API endpoint based on howsmyssl to check the TLS version of clients then notify those clients about whether or not they passed the test. However, several clients have reported ...
user avatar
0 votes
1 answer
503 views

Disable 3DES (Triple DES) in thunderbird

Thunderbird still uses 3DES for SMIME encryption (bug #1167857). Since 3DES is severely "broken" and uses only 80 bits of security, I would like to tell my Thunderbird, not to use that algorythm any ...
user avatar
  • 2,350
2 votes
1 answer
241 views

Does Sweet32 work on services that do not use web sessions/cookies (such as FTP)?

Saintbot PCI/vuln scanner (via Controlscan) is flagging FTP port 21 vulnerable to Sweet32, based on the existence of a 3DES "grade C" cipher. The fix is easy -- update the available ciphers to be ...
user avatar
  • 161
9 votes
3 answers
22k views

Is the 3DES algorithm secure?

Can we use the 3DES algorithm for exchanging confidential information? I am using it in my project. Security code reviewer has raised a bug saying that it is not secure but I see that it is mentioned ...
user avatar
  • 164
2 votes
1 answer
243 views

3DES Security - safe use cases

What are safe use cases for 3DES? Is it safe to use it in situations where you are encrypting smaller amounts of data? After the recently published 'birthday attacks' on 3DES (eg SWEET32), I've read ...
user avatar
  • 21