cryptography7

DES (Data Encryption Standered)

DES :

DES adopted in 1977 by (NIST) National Institute of Slandered and Technology).
In DES data are encrypted in 64 bit block with a key length 56 bits and with output ciphertext 64 bits.
DES has the exact structure of Feistel Cipher but without Initial Permutation (IP) and Inverse Initial Permutation (IP ^-1).

Key generator algorithm :

The key generator passes through many steps to produces subkeys.


1- Key generator algorithm take 64 bits key as input,the input key numbered in a table from 1 to 64 as the following:


2- Every eighth bit is ignored and produce 56 bits.



3- 56 bits passes through a permutation Choice one(PC-1)as the following:


4- The output is separated into two 28 bits C and D , the first 28 bits are called C0(left part) and the last 28 bits are called D0.

5- At each round a circular left shift is preformed on Ci-1 and Di-1 by 1 or 2 bits by the next table.


6- Then Ci-1 and Di-1 in each round passes through permutation choice two (PC-2) to produces 48 bits.


7- The permutation Choice Two output in each round is use as input to encryption algorithm.



Encryption Algorithm :

There are two inputs to encryption algorithm 1- Plaintext 64 bits2- Encryption key 48 bits.
Encryption algorithm also passes through many steps to produce a ciphertext, The next figure



1- The plaintext block 64 bits pass through an initial permutation (IP) that rearranged bits and produces the permuted input.

Initial Permutation :

A- Initial Permutation takes the plaintext as input table consists of 64 bits numbered from 1 to 64


B- Then the initial permutation will be permuted input 64 bits as the following :


C- The Inverse Initial Permutation is:


2- The permuted input block split into two halves each is 32 bits, the first 32 bits are called L and the last 32 bits are called R.

Now The F function will start by the rest of all steps.

3- Expand R 32 bits to 48 bits to fit the subkey by preform Expansion permutation(E) as the following:


4- Preform Exclusive-OR between the subkey and Expansion Permutation (E) on R .
     E(Ri-1)⊕ Ki.

5- The result of E(Ri-1) ⊕ Ki pass through a substitution function and produces 32 bits output

Substitution Function :


Substitution Function is rolled by S-Box , S-Box consists of 8 boxes each of which accepts 6 bits as input and produces 4 bits output by the following:


A- Break the result of E(Ri-1)⊕Ki into 8 blocks each contain 6 bits , These blocks are numbered from 1 to 8.
B- Each block will preform a substitution with S-Box with the same number by the following roles :



A- The first and the last bits of each block together as 2 bit value to indicate the number of row in the same number S-Box.
B- The middle four bits of each block together as-bit value to indicate the number of column in the same number S-Box.
C- The decimal value which selected by the row and the column converted to-bit value in all S-Boxes.

For Example :

Suppose the first 6 bits of the result of E(Ri-1)⊕Ki = 010101.
So, the input to S1 = 010101.
The row value = 0 1 = 1 (decimal).
The column value = 1010 = 10 (decimal).
The decimal value will be 12 = 1100 (4-bit value).

D- Combine results of each S-Box together 32 bits.

6- The result of the substitution operation(output of S-Boxes) passes through a Permutation Function (P)


At this point the function F is finished.

7- Preform Exclusive-OR between the output of the Permutation Function(P) and Li-1 , and then put the result in Ri , and put Ri-1 in Li.

The overall formulas for DES Encryption Algorithm.
Li = Ri-1.
Ri = Li-1 ⊕ F(Ri-1,Ki).


8- Preform 32-bit swap on the result of the final round , then preform Inverse Initial Permutation(IP^-1) on the swapped data to produces the ciphertext 64 bits.


Decryption Algorithm :

The inputs to decryption algorithm are ciphertext and subkey Ki but in reverse order, start with Kn then K(n-1) and so on until K1 in the last round.

Note: You can use DES-Calculator https://github.com/Hamza-Megahed/des-calculator to study each round in detail.