V3:Tutorial B5-2 Breaking DES (Straightforward) - Revision history

DavidRysk at 22:54, 4 December 2017

2017-12-04T22:54:04Z

Coflynn at 22:39, 24 September 2017

2017-09-24T22:39:15Z

Coflynn: Created page with "Follow the same procedure as in : Tutorial B5 Breaking AES (Straightforward), but: * Flashing the DES firmware to the target device (e.g. chipwhisperer/hardware/victims/fi..."

2017-09-24T22:38:41Z

Created page with "Follow the same procedure as in : Tutorial B5 Breaking AES (Straightforward), but: * Flashing the DES firmware to the target device (e.g. chipwhisperer/hardware/victims/fi..."

New page

Follow the same procedure as in : [[Tutorial B5 Breaking AES (Straightforward)]], but:
* Flashing the DES firmware to the target device (e.g. chipwhisperer/hardware/victims/firmware/simpleserial-des/simpleserial-des-xmega.hex), instead;

and:
* Setting an appropriate 'Total Samples' (e.g. 3500) and 'Offset' (e.g. 15500) in the ''Scope Settings'';
* Setting the 'Key Length (Bytes)', 'Input Length (Bytes)' and 'Output Length (Bytes)' to 8 bytes in the ''Target Settings'';
* Setting an appropriate 8 bytes Key in the ''Generic Settings (e.g. 2B 7E 15 16 28 AE D2 A6)''.

* Or, alternatively, execute the script "ChipWhisperer-Lite: DES SimpleSerial on XMEGA" to do the above steps automatically in this platform.

In the Analyzer, the only difference is to set the 'Crypto Algorithm' to DES in the ''Attack Settings''.

[[File:breaking_des.png|896x896px]]

Note that the attack attemps to recover the [[wikipedia:File:DES-key-schedule.png|first round key]], which only has 48bits ([[wikipedia:File:DES-f-function.png|8 s-boxes x 6 bits each]]), while the original key has 56 significative bits (64 if we count the parity bits that are irrelevant). So, if we map the first round key, obtained after the attack, to the original key (you can use the provided DES Key Schedule Tool to do it), there will still be 8 bits missing (256 combinations).

[[File:deskeyschedulecalc.png]]

In this example, it matches the original key that was:

[[File:key_des.png|801x801px]]

← Older revision		Revision as of 22:54, 4 December 2017
Line 34:		Line 34:

	[[File:key_des.png\|801x801px]]		[[File:key_des.png\|801x801px]]
		+
		+	{{Template:Tutorials}}
		+	[[Category:Tutorials]]

← Older revision		Revision as of 22:39, 24 September 2017
Line 1:		Line 1:
		+	{{Infobox tutorial
		+	\|name = B5-2: Breaking DES (Straightforward)
		+	\|image =
		+	\|caption =
		+	\|software versions =
		+	\|capture hardware = CW-Lite, CW-Lite 2-Part, CW-Pro
		+	\|Target Device =
		+	\|Target Architecture = XMEGA
		+	\|Hardware Crypto = No
		+	\|Purchase Hardware =
		+	}}
		+
		+
		+
	Follow the same procedure as in : [[Tutorial B5 Breaking AES (Straightforward)]], but:		Follow the same procedure as in : [[Tutorial B5 Breaking AES (Straightforward)]], but:
	* Flashing the DES firmware to the target device (e.g. chipwhisperer/hardware/victims/firmware/simpleserial-des/simpleserial-des-xmega.hex), instead;		* Flashing the DES firmware to the target device (e.g. chipwhisperer/hardware/victims/firmware/simpleserial-des/simpleserial-des-xmega.hex), instead;