1

I'm working with TripleDES in C# and according to the MSDN entry, TripleDES can function with two or three 56-bit keys and uses three iterations of DES. However, I can't figure out how to specify how many keys to use, and what those keys are. In fact, all examples I can find of show TripleDES.CreateEncryptor() being called with one or no keys. In addition, the TripleDES class only has one Key property.

How do I specify the second and third keys for TripleDES?

Thanks in advance.

CatShoes
  • 3,613
  • 5
  • 29
  • 43

1 Answers1

3

If you look at the Key property, you'll see: "This algorithm supports key lengths from 128 bits to 192 bits in increments of 64 bits.".

If you want 2-key TripleDES, set the key to a 16-byte key. If you want 3-key TripleDES, set it to a 24-byte key. See this post for more information

The wikipedia entry, lists the different keying options.

The reason is there is a meet-in-the-middle attack, and 2-key TripleDES let's you avoid the attack while only using two keys. Unfortunately, there are other attacks, and so NIST considers it's strength to be about 80-bits of security. 3-key TripleDES is also vulnerable, and only has an effective strength of 112-bits.

If you have a choice, you should prefer AES over TripleDES.

Community
  • 1
  • 1
mfanto
  • 14,168
  • 6
  • 51
  • 61
  • Ahh, I missed the key length part. Well that clears that up. I only need TripleDES for legacy support. Thanks! – CatShoes Dec 11 '12 at 13:05