At 10:42 AM 08/13/2003 -0700, Major Variola (ret) wrote:

At 12:56 PM 8/13/03 -0400, Trei, Peter wrote:

...

http://www.icbnd.com/data/newsletter/community%20banker%20feb%2003%20.pdf

...

Finally, five full years after DES was definitively proved to be vulnerable to brute force attack, the major ATM networks are moving to 3DES.

I'm shocked that they didn't do so years ago - I thought they'd at least done the authentication parts.

And you can still use 2-key 3DES...

That's ok - 2-key 3DES still has 112 bits of key strength, which is 2**56 times harder than cracking single-DES. 3-Key 3DES looks like it should be harder, but it's still only 112 bits because of meet-in-the-middle attacks using 2**56 words of memory.