DataTerminology.comNEW
Also known as: DES
A legacy 64-bit block cipher with a 56-bit key, historically important but now insecure due to brute-force vulnerability.
DESCRIPTION
The Data Encryption Standard (DES) is a symmetric block cipher standardized in the 1970s and widely deployed for decades. It uses a 64-bit block size with a 56-bit effective key and a Feistel structure. Advances in computing and cryptanalysis rendered DES susceptible to brute-force attacks, leading to deprecation. Triple DES (3DES) extended DES’s lifespan, and AES ultimately replaced it for most applications. Today, DES is primarily of historical and educational interest and should not be used for new systems.
ALTERNATIVE DEFINITIONS
NIST
This publication specifies the Data Encryption Standard (DES), a FIPS-approved cryptographic algorithm for the protection of sensitive unclassified data.
Emphasizes the formal status as a FIPS-approved algorithm for sensitive data at the time.
Cloudflare
The Data Encryption Standard (DES) is a symmetric-key algorithm for the encryption of digital data.
Provides a concise, widely recognized definition oriented to practical web security contexts.
RELATED TERMS
Feistel Function DESx Whitening Block Cipher Modes of Operation Cipher Block Chaining S-Box Key Schedule Meet-in-the-Middle Attack
COMPETING TERMS
RELATIONS
- Derivations: 3DES
KNOWLEDGE AREAS
Data Security Software Engineering Data Privacy & Compliance
TARGET AUDIENCE
Security Architect Cybersecurity Engineer Software Developer Chief Information Security Officer Data Privacy Officer
EXTERNAL SOURCES
- Wikipedia - Data Encryption Standard
- NIST - Archived FIPS for DES
- Cloudflare - Intro overview of DES
TOP QUESTIONS
Why is the Data Encryption Standard considered insecure today?
Its 56-bit key can be brute-forced with modern hardware. Multiple public demonstrations have recovered keys rapidly, proving DES unsuitable for contemporary security needs.
Category: Risks
What replaced the Data Encryption Standard in practice?
AES replaced DES for most use cases, offering larger keys, a 128-bit block size, and modern security margins. Triple DES served as a transitional measure.
Category: Alternatives
Is it ever acceptable to use the Data Encryption Standard now?
No, for new systems DES should not be used. Existing systems should be migrated to AES or another modern algorithm with adequate security.
Category: Opinion
What cryptographic structure does the Data Encryption Standard use?
DES uses a Feistel network with 16 rounds, S-boxes for nonlinearity, and permutations for diffusion.
Category: Concept
What is a common misunderstanding about the Data Encryption Standard?
Some believe DES is secure if combined with strong modes; however, the small key size remains the fundamental weakness, regardless of mode.
Category: Misunderstanding
When was the Data Encryption Standard introduced?
DES was standardized in the 1970s and became a U.S. federal standard in 1977. It remained widely used for decades.
Category: History
How did 3DES extend the life of the Data Encryption Standard?
3DES applies DES three times with multiple keys, significantly increasing effective key strength and mitigating brute-force attacks against single DES.
Category: Concept
What modes were commonly used with the Data Encryption Standard?
CBC and ECB were common historically, with CBC generally preferred for security. Modern AEAD modes are recommended with newer ciphers.
Category: Usage
What was the biggest risk of continuing to use the Data Encryption Standard?
Rapid key recovery via brute-force compromises confidentiality entirely, exposing sensitive data and violating compliance requirements.
Category: Risks