Why is the Data Encryption Standard (DES) considered insecure for modern use?
- A.A. It uses asymmetric encryption
- B.C. It does not support block cipher modes
- C.B. Its 56-bit key length is too short and vulnerable to brute-force attacks
- D.D. It was never standardized by any organization
Why C is correct
DES uses a 56-bit key, which can be brute-forced in a matter of hours with modern hardware. In 1998, the EFF's 'Deep Crack' machine broke DES in under 23 hours. Triple DES (3DES) extended the key length but is also being deprecated in favor of AES.
Know someone studying for Security Fundamentals? Send them this one.