FAQ BANNER

Question 73. How does One Use Triple-DES in CBC Mode?

Until recently, the most significant use of triple-DES (see Question 72) was for the encryption of single DES keys, and there was really no need to consider how one might implement various block cipher modes (see Question 82 and Question 83) when the block cipher in question is actually one derived from multiple encryption. However, as DES nears the end of its useful lifetime (see Question 65), more thought is being given to an increasingly widespread use of triple-DES.

In particular, there are two obvious ways to implement the CBC mode (see Question 82) for triple-DES. With single-DES in CBC mode, the ciphertext is exclusive-ored with the plaintext before encryption. With triple-DES however, we might use feedback around all three DES operations from the ciphertext to the plaintext, something which is called outer-CBC. Alternatively, we might run the feedback around each individual encryption component, thereby making, in effect, triple-(DES-CBC). This is referred to as inner-CBC, since there are internal feedbacks that are never seen by the cryptanalyst.

Performance-wise, there can be some advantages to use the inner-CBC option, but research has established that outer-CBC is in fact more secure [Bih95]. Outer-CBC is the recommended way for using triple-DES in the CBC mode.

| Question 74|
| Back to FAQ INDEX |
| RSA Labs' FAQ Home || RSA Labs' Home | RSA Home |
| What's New? | RSA & Partner Products | | FTP Server | About ... | Contact Sales |
| Contact Technical Support |



Contact RSA Laboratories:
100 Marine Parkway, Suite 500
Redwood City, CA
94065-1031

phone: 415-595-8782
fax: 415-595-1873
Website: http://www.rsa.com/rsalabs/



Website feedback or comments can be sent to : WEBMAVEN@RSA.COM

Copyright ©1996, RSA Laboratories, Inc. All Rights Reserved.
Last Updated: Thursday, April 4, 1996