Questions tagged [3des]

3DES is an encyption algorithm that consist of three rounds of DES encryption.

Filter by
Sorted by
Tagged with
9
votes
3answers
20k views

Is the 3DES algorithm secure?

Can we use the 3DES algorithm for exchanging confidential information? I am using it in my project. Security code reviewer has raised a bug saying that it is not secure but I see that it is mentioned ...
4
votes
1answer
100 views

Can a MAC be used as an irreversible PCI Token?

I'm looking at implementing a PCI token generation process based on a MAC code obtained from the PAN. This would be an irreversible token. The method I have in mind seems OK to me, but I'm not quite ...
2
votes
1answer
151 views

3DES supported in application although disabled in Windows

Can users actually use the 3DES cipher to connect to a Tomcat web server, if the 3DES cipher has been disabled via registry keys in Windows: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\...
2
votes
1answer
174 views

Does Sweet32 work on services that do not use web sessions/cookies (such as FTP)?

Saintbot PCI/vuln scanner (via Controlscan) is flagging FTP port 21 vulnerable to Sweet32, based on the existence of a 3DES "grade C" cipher. The fix is easy -- update the available ciphers to be ...
2
votes
1answer
178 views

3DES Security - safe use cases

What are safe use cases for 3DES? Is it safe to use it in situations where you are encrypting smaller amounts of data? After the recently published 'birthday attacks' on 3DES (eg SWEET32), I've read ...
1
vote
2answers
976 views

Why does tls_version “TLS 1.2” from howsmyssl rate “Probably Okay” in Chrome on Windows 10 but “Bad” in IE11 on Windows 7?

I'm implementing an API endpoint based on howsmyssl to check the TLS version of clients then notify those clients about whether or not they passed the test. However, several clients have reported ...
1
vote
2answers
2k views

How to generate the most secure private key? [closed]

I need to generate the most secure private key. Usually I use a command: openssl genrsa -des3 -out mykey.key 2048 Is triple DES secure enough? Is 2048 large enough? Are there any other ways to ...
0
votes
1answer
378 views

Disable 3DES (Triple DES) in thunderbird

Thunderbird still uses 3DES for SMIME encryption (bug #1167857). Since 3DES is severely "broken" and uses only 80 bits of security, I would like to tell my Thunderbird, not to use that algorythm any ...
0
votes
0answers
49 views

How secure is this scheme?

Introduction of the cryptosystem Let's say we have a system with a central server SRV that is considered secure (communication with this server is secured too with TLS). Then let's say we have many ...
0
votes
1answer
607 views

SSH most common symmetric encryption algorithm in 2018

What is the most common symmetric encryption algorithm for encrypting data between two machines with SSH in 2018? I have attempted to find this out but I generally come across outdated blogs. I ...