17 Dec
2003
17 Dec
'03
11:17 p.m.
Noel Yap writes:
The S-Boxes in DES were optimized to hinder Differential Cryptanalysis. I've seen no studies on the effectiveness of jumbling the S-Boxes during encryption -- even Biham and Shamir's book doesn't mention it -- but, I figure, if it helps, DES would probably already be doing it (unless of course the NSA thought the jumbling would make too good an algorithm).
Your conclusion may be correct, but your reasoning is faulty. DES was built to be run in hardware, which doesn't make S-Box jumbling easy; it was in fact built to be run on the hardware of twenty years ago, which was far more constrained than our hardware is now. Perry