What is DES Encryption: How It Works?

Learn the basics of cybersecurity with Data Encryption Standard in this beginner friendly guide

Each advancement in the field has made managing your cybersecurity more complicated. While a simple cyclic cipher was an excellent encryption tool in Ancient Greece, today, it has become hard to keep yourself secure even with some advanced encryption tools.

To understand how cybersecurity may evolve in the future, it is important to understand which developments have driven it forward to date. Even with all these improvements, the fact that encryption remains our primary means of defense against unauthorized use of data has remained constant. To understand it further, let’s explore it in detail.

What is Encryption?

Encryption is the foundation of cryptography. The process converts readable information (plaintext) into scrambled bits of data (ciphertext) to prevent unauthorized parties from reading it. A certain key is required to reverse this process and decrypt the ciphertext into the original plaintext.

The designated parties possess and must therefore keep the key secure. However, not all forms of encryption excel at doing so.

Let’s look at the two primary classifications of encryption and how they handle key security.

Types of Encryption: Symmetric and Asymmetric

Encryption is broadly classified as symmetric and asymmetric, with the latter being a newer and more secure method.

During symmetric encryption, the client and server share a common key for encrypting and decrypting messages, which they share across the network before performing the encryption. This vulnerability exposes the key to attacks such as man-in-the-middle attacks, where an attacker can intercept and use it for decryption.

On the other hand, asymmetric encryption uses separate keys for encrypting and decrypting the information. The key used to encrypt the information is known as the public key and is shared across the network, while the key used for decryption is called the private key, which is never shared across the network.

Data Encryption Standard (DES): A Relic in Cyber Security

Before asymmetric encryption algorithms were created, organizations widely used symmetric encryption despite its obvious flaw. One of the widely used algorithms for symmetric encryption is known as the DES algorithm or the Data Encryption Standard algorithm.

As mentioned earlier, the sender and receiver share a single key across the network for encryption and decryption. After both parties possessed the key, the encryption of messages began. Today, the AES or Advanced Encryption Standard has replaced it.

Features of the DES Algorithm

Before we get into the details of how the DES algorithm worked, it is important to understand a few key features that it used. These are:

• Block Cipher: Block ciphers encrypt entire data blocks using a key instead of encrypting single bits. In the case of DES, the algorithm divided the given data into blocks of 64 bits each and then encrypted the blocks. This was more secure than the encryption of each bit, as that allowed brute force methods to crack the key more easily.
• Multiple Rounds of Encryption: To avoid unauthorized access, the DES used multiple layers of encryption that reached a total number of 16. In each layer, the blocks were either individually encrypted as part of a node/connected to previous blocks. For the decryption of the ciphertext, following the same steps in reverse was essential.
• 64-bit Key: Unlike most other symmetric encryption methods, DES uses a 64-bit key. Out of these, the effective length of the key was 56 bits, while the remaining 8 bits were used for checks. During the 16 encryption rounds, the algorithm generated 16 subkeys, with each subkey being 48 bits.
• Replacement & Permutation: The algorithm would define the sequence of permutations and replacements during encryption. This would prevent patterns from emerging that would make keys easier to crack.

How Did the DES Algorithm Work?

The DES Algorithm required a security provider in order to work. Security managers would choose the right security provider on the basis of the language used such as Python, C, or Java.

After adding the security provider, the key generator would generate a random key and initiate the encryption process. The DES would also test the generated encryption for vulnerabilities and then implement it in the network.

What Makes DES Unsafe?

While the simple fact that DES used symmetric encryption is enough to declare it unsafe, it was considered as such even before asymmetric encryption methods were invented.

The primary flaw that made professionals doubt the safety of the DES algorithm was the fact that it used a 56-bit key. By applying basic permutation, one could calculate the possible keys that could be generated using 56 bits, resulting in a number close to 72 quadrillion.

While the number seems incredible, with the power of modern machines, a dedicated attacker can crack the key. Furthermore, rumors circulated regarding the involvement of the National Security Agency (NSA) in weakening and compromising the algorithm to enhance mass surveillance capabilities and reduce its security.

AES Vs. DES: A New Dawn

In modern network security, the AES standard has completely replaced DES for providing our security. Here are some major differences between the two:

DES Encryption	AES Encryption
Uses a single key for encryption and decryption.	Uses separate keys for encryption and decryption.
The key is 64 bits and the effective key length is 56 bits.	Keys can be up to 256 bits long.
Obsolete.	Used in modern systems and network security.

What Keeps DES Relevant Today?

Due to its security flaws, DES encryption is not used anymore in modern systems. However, it was a major tool for security during its time and is still relevant for academic reasons. Most modern cybersecurity algorithms are complex at their fundamental levels, and DES serves as a stepping stone to understanding them.

During the academic training of cybersecurity aspirants, instructors often explain cryptography methods using DES. Moreover, it is also used in teaching the fundamentals of attacking methods since it is easier to attack DES than AES. Therefore, the algorithm still serves an important role in cyber security today.

Final Thoughts

DES may be an inefficient security algorithm, however it was an important tool in the evolution of cryptography. Without seeing the evident flaws in it, cybersecurity professionals wouldn’t have incorporated features such as 256-bit keys in AES and other modern encryption algorithms. Therefore, learning it serves as an important step in understanding the fundamentals of data security.

Search