How to implement the
Data Encryption Standard (DES)
A step by step tutorial
Version 1.2
The Data Encryption Standard (DES) algorithm, adopted by the U.S.
government in 1977, is a block cipher that transforms 64-bit data blocks
under a 56-bit secret key, by means of permutation and substitution. It
is officially described in FIPS PUB 46. The DES algorithm is used for
many applications within the government and in the private sector.
This is a tutorial designed to be clear and compact, and to provide a
newcomer to the DES with all the necessary information to implement it
himself, without having to track down printed works or wade through C
source code. I welcome any comments.
Matthew Fischer <mfischer@heinous.isca.uiowa.edu>
；上面是介绍，我就不翻了。 ;)
Here's how to do it, step by step:
1 Process the key.
；生成密钥
1.1 Get a 64-bit key from the user. (Every 8th bit is considered a
parity bit. For a key to have correct parity, each byte should contain
an odd number of "1" bits.)
；从用户处得到一个64位的密钥。（每8位一组，每组的第8位是校验位。如果校验
正确，每个字节应该有一个为1的
1.2 Calculate the key schedule.
；计算密钥表
1.2.1 Perform the following permutation on the 64-bit key. (The parity
bits are discarded, reducing the key to 56 bits. Bit 1 of the permuted
block is bit 57 of the original key, bit 2 is bit 49, and so on with bit
56 being bit 4 of the original key.)
；对64位的密钥进行如下的置换。（去掉校验位，密钥的实际长度是56位。置换后的
；第一位是原密钥的第57位，第二位是原第49位，第五十六位就是原来密钥的第4位。）
# 古怪的置换，哪位大哥能写出算式？
# 好象是分成两部
# for(j=57;j<64;j++)
# {
# for(i=j;i<0;i-=8)
# {
# if(k=28)
# break;
# c[k]=i;
# k++;
# }
# 这是前28位，不知道对不对？请指正。
1.2.2 Split the permuted key into two halves. The first 28 bits are
called C[0] and the last 28 bits are called D[0].
；把置换后的密钥分为C[0] 和D[0]两部分，各28位。
1.2.3 Calculate the 16 subkeys. Start with i = 1.
；计算16个子密钥，从i=1开始。
1.2.3.1 Perform one or two circular left shifts on both C[i-1] and
D[i-1] to get C[i] and D[i], respectively. The number of shifts per
iteration are given in the table below.
；分别对C[i-1]和D[i-1]进行左移一到两位的位移操作，得到C[i]和D[i]。每次
；位移数目如下：
# 共16次
1.2.3.2 Permute the concatenation C[i]D[i] as indicated below. This
will yield K[i], which is 48 bits long.
；如下表，改变C[i]和D[i]的排列，得到48位长的k[i]。
# 不懂 :(
# 是不是丢掉了某些位？
1.2.3.3 Loop back to 1.2.3.1 until K[16] has been calculated.
；重复 1.2.3.1 开始的过程，算出16个字密钥。
2 Process a 64-bit data block.
；处理一个64位的数据块。
2.1 Get a 64-bit data block. If the block is shorter than 64 bits, it
should be padded as appropriate for the application.
；获取一个64位的数据块。如果数据块不到64位，就补足64位。
# 可能是用0补吧。
2.2 Perform the following permutation on the data block.
；对数据块进行如下置换。
# 又是分成两部分进行，先是偶数位。
# 比较简单，算式就不写了。
2.4.2 Exclusive-or E(R[i-1]) with K[i].
；用K[i]对E(R[i-1])进行异或操作。
2.4.3 Break E(R[i-1]) xor K[i] into eight 6-bit blocks. Bits 1-6 are
B[1], bits 7-12 are B[2], and so on with bits 43-48 being B[8].
；将上一步的操作结果分成8块，每块6位，命名为B[1]到B[8]。
2.4.4 Substitute the values found in the S-boxes for all B[j]. Start
with j = 1. All values in the S-boxes should be considered 4 bits wide.
；把所有的B[j]在S框中进行置换，S框中所有的值的宽（长）度应是4位。
# 不懂！！！ :(
2.4.4.1 Take the 1st and 6th bits of B[j] together as a 2-bit value
(call it m) indicating the row in S[j] to look in for the substitution.
；把B[j]中的第一位和第六位命名为m，表示S[j]在置换时的行。
2.4.4.2 Take the 2nd through 5th bits of B[j] together as a 4-bit
value (call it n) indicating the column in S[j] to find the substitution.
；把B[j]二到五位命名为n，表示S[j]在置换时的列。
2.4.4.3 Replace B[j] with S[j][m][n].
；用S[j][m][n]置换B[j]。
设为主页
收藏本站
相关文章: