Expand description
DES (FIPS 46-3) and Triple-DES (3DES / TDEA) block cipher implementations.
DES operates on 64-bit blocks with a 56-bit effective key (stored as 64 bits with parity). Triple-DES uses three DES keys in EDE (Encrypt-Decrypt-Encrypt) mode.
§⚠ Side-channel posture (legacy, no hardening planned)
Both DES and Triple-DES use table-based S-boxes with the
same cache-timing leakage surface as the AES table-based
implementation (cf. super::aes). There is no hardening
planned — these primitives ship for legacy interop only and
should be avoided on SCA-sensitive targets. Prefer AES (and
once roadmap item T1-A lands, a fixsliced AES) instead.
§Security note
DES is considered insecure due to its 56-bit key length and should not be used for new applications. 3DES is deprecated by NIST as of 2023. Use AES instead.