Lessons from DES: What We Learned
Examine the cryptographic and policy lessons from the DES era that shaped how we design standards today.
Key Length and Moore's Law
DES's 56-bit key was designed with 1977's computing power in mind. The designers expected it to be secure for at least 10-15 years. By 1997 (20 years later), it could be broken in months; by 1999, in hours.
The lesson: cryptographic key lengths must account for future computing advances. NIST now recommends that systems have a security margin of at least 112 bits to remain secure through 2030 and 128+ bits for long-term security.
Public Algorithm Design and Kerckhoffs's Principle
Auguste Kerckhoffs stated in 1883 that a cipher should be secure even if everything about the system except the key is public knowledge. DES was the first government-standardized cipher designed with this principle explicitly in mind.
Publishing DES's complete specification allowed the cryptographic community to analyze it for weaknesses for 20 years. The cipher proved more resilient under public scrutiny than alternatives that relied on algorithm secrecy.
All lessons in this course
- DES Design and the Lucifer Cipher
- How DES Was Cracked
- Triple DES: Extending DES Lifespan
- Lessons from DES: What We Learned