DataTerminology.comNEW
Also known as: Triple DES, TDEA
A legacy symmetric block cipher that applies DES three times to each block to increase security over DES.
DESCRIPTION
3DES, also known as TDEA, strengthens DES by encrypting, decrypting, then encrypting with independent keys. It provides a larger effective key space and mitigates brute-force attacks on single DES. NIST’s SP 800-67 specified TDEA for sensitive data, but modern guidance deprecates 3DES due to 64-bit block size limits and performance drawbacks. AES and AEAD modes are recommended for new deployments. 3DES remains in some legacy protocols and systems but is being phased out.
ALTERNATIVE DEFINITIONS
NIST
This Recommendation specifies the Triple Data Encryption Algorithm (TDEA), including keying options and recommended implementation details for the protection of sensitive data.
Formal scope of the NIST recommendation, including keying options and usage guidance.
Cloudflare
Triple DES (3DES) is a symmetric-key block cipher that applies the DES algorithm three times to each data block.
Emphasizes the triple-application construction to improve security over DES.
RELATED TERMS
Data Encryption Standard Block Cipher Modes of Operation Cipher Block Chaining Keying Options Meet-in-the-Middle Attack SP 800-67 Key Schedule Whitening
COMPETING TERMS
RELATIONS
- Derived from: Data Encryption Standard
KNOWLEDGE AREAS
Data Security Software Engineering Data Privacy & Compliance
TARGET AUDIENCE
Security Architect Cybersecurity Engineer Software Developer Chief Information Security Officer Data Privacy Officer
EXTERNAL SOURCES
TOP QUESTIONS
Why was 3DES introduced after the Data Encryption Standard?
It was designed to increase effective key length and security without replacing DES hardware immediately, using three sequential DES operations.
Category: History
Is 3DES still considered secure?
It is widely deprecated due to 64-bit block limits and performance concerns. AES with modern modes is recommended for new systems.
Category: Risks
What are 3DES keying options?
Common options are 3 independent keys (K1, K2, K3), two-key (K1=K3), and less secure one-key configurations that should be avoided.
Category: Concept
How does meet-in-the-middle attack affect 3DES?
Meet-in-the-middle reduces effective security below naïve 168 bits, but three-key 3DES still offers significantly more security than single DES.
Category: Risks
What protocols historically used 3DES?
TLS, IPsec, and SSH historically supported 3DES, though most have migrated to AES-based cipher suites.
Category: Usage
When should I migrate away from 3DES?
Migrate now if feasible, prioritizing systems handling sensitive or regulated data and those experiencing performance or compatibility issues.
Category: Requirements
What is a suitable replacement for 3DES?
AES in AEAD modes (GCM, CCM) is the standard replacement, providing security and performance improvements.
Category: Alternatives
Does 3DES support authenticated encryption?
Not natively. It requires composition with MACs or AEAD constructions; AES-GCM provides integrated confidentiality and authenticity.
Category: Concept
What is the performance impact of 3DES compared to AES?
3DES is typically slower and lacks widespread hardware acceleration. AES often benefits from CPU instructions and optimized implementations.
Category: Performance