page_des (3) - Linux Manuals

page_des: DES - Data Encryption Standard crypto interface

NAME

page_des - DES - Data Encryption Standard crypto interface See the library functions here: DES crypto functions

DES was created by IBM, modififed by NSA and then adopted by NBS (now NIST) and published ad FIPS PUB 46 (updated by FIPS 46-1).

Since the 19th May 2005 DES was withdrawn by NIST and should no longer be used. See EVP - generic crypto interface for replacement encryption algorithms and interfaces.

Read more the iteresting history of DES on Wikipedia

DES key generation

To generate a DES key safely you have to use the code-snippet below. This is because the DES_random_key() can fail with an abort() in case of and failure to start the random generator.

There is a replacement function DES_new_random_key(), however that function does not exists in OpenSSL.

* DES_cblock key;
* do {
*     if (RAND_rand(&key, sizeof(key)) != 1)
*          goto failure;
*     DES_set_odd_parity(key);
* } while (DES_is_weak_key(&key));
* 

DES implementation history

There was no complete BSD licensed, fast, GPL compatible implementation of DES, so Love wrote the part that was missing, fast key schedule setup and adapted the interface to the orignal libdes.

The document that got me started for real was 'Efficient
  Implementation of the Data Encryption Standard' by Dag Arne Osvik. I never got to the PC1 transformation was working, instead I used table-lookup was used for all key schedule setup. The document was very useful since it de-mystified other implementations for me.

The core DES function (SBOX + P transformation) is from Richard Outerbridge public domain DES implementation. My sanity is saved thanks to his work. Thank you Richard.