DES全稱為Data Encryption Standard,即數(shù)據(jù)加密標(biāo)準(zhǔn),是一種使用密鑰加密的塊算法,1977年被美國(guó)聯(lián)邦政府的國(guó)家標(biāo)準(zhǔn)局確定為聯(lián)邦資料處理標(biāo)準(zhǔn)(FIPS),并授權(quán)在非密級(jí)政府通信中使用,隨后該算法在國(guó)際上廣泛流傳開(kāi)來(lái)。需要注意的是,在某些文獻(xiàn)中,作為算法的DES稱為數(shù)據(jù)加密算法(Data Encryption Algorithm,DEA),已與作為標(biāo)準(zhǔn)的DES區(qū)分開(kāi)來(lái)。
? ? ?DES算法
DES算法的入口參數(shù)有三個(gè):Key、Data、Mode。其中Key為7個(gè)字節(jié)共56位,是DES算法的工作密鑰;Data為8個(gè)字節(jié)64位,是要被加密或被解密的數(shù)據(jù);Mode為DES的工作方式,有兩種:加密或解密。
DES加密算法詳解
DES算法的入口參數(shù)有三個(gè):
Key, Data, Mode
Key 為64bit密鑰, Data為64bit數(shù)據(jù),Mode為加密還是解密。
DES算法的過(guò)程:
1. 對(duì)輸入的密鑰進(jìn)行變換。
用戶的64bit密鑰,其中第8, 16, 24, 32, 40, 48, 56, 64位是校驗(yàn)位, 使得每個(gè)密鑰都有奇數(shù)個(gè)1。所以密鑰事實(shí)上是56位。對(duì)這56位密鑰進(jìn)行如下表的換位。
57, 49, 41, 33, 25, 17, 9, 1, 58, 50, 42, 34, 26, 18, 10, 2, 59, 51, 43, 35, 27, 19, 11, 3, 60, 52, 44, 36,
63, 55, 47, 39, 31, 23, 15, 7, 62, 54, 46, 38, 30, 22, 14, 6, 61, 53, 45, 37, 29, 21, 13, 5, 28, 20, 12, 4,
表的意思是第57位移到第1位,第49位移到第2位,。。。。。。 以此類推。變換后得到56bit數(shù)據(jù),將它分成兩部分,C[0][28], D[0][28]。
2. 計(jì)算16個(gè)子密鑰,計(jì)算方法C[i][28] D[i][28]為對(duì)前一個(gè)C[i-1][28], D[i-1][28]做循環(huán)左移操作。16次的左移位數(shù)如下表:
1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16 (第i次)
1, 1, 2, 2, 2, 2, 2, 2, 1, 2, 2, 2, 2, 2, 2, 1 (左移位數(shù))
3. 串聯(lián)計(jì)算出來(lái)的C[i][28] D[i][28] 得到56位,然后對(duì)它進(jìn)行如下變換得到48位子密鑰K[i][48]
14, 17, 11, 24, 1, 5, 3, 28, 15, 6, 21, 10, 23, 19, 12, 4, 26, 8, 16, 7, 27, 20, 13, 2,
41, 52, 31, 37, 47, 55, 30, 40, 51, 45, 33, 48, 44, 49, 39, 56, 34, 53, 46, 42, 50, 36, 29, 32,
表的意思是第14位移到第1位,第17位移到第2位,以此類推。在此過(guò)程中,發(fā)現(xiàn)第9,18,22,25, 35,38,43,54位丟棄。
4. 對(duì)64bit的明文輸入進(jìn)行換位變換。換位表如下:
58, 50, 12, 34, 26, 18, 10, 2, 60, 52, 44, 36, 28, 20, 12, 4,
62, 54, 46, 38, 30, 22, 14, 6, 64, 56, 48, 40, 32, 24, 16, 8,
57, 49, 41, 33, 25, 17, 9, 1, 59, 51, 43, 35, 27, 19, 11, 3,
61, 53, 45, 37, 29, 21, 13, 5, 63, 55, 47, 39, 31, 23, 15, 7
表的意思就是第一次變換時(shí),第58位移到第1位,第50位移到第2位,。。。。。。 依此類推。得到64位數(shù)據(jù),將這數(shù)據(jù)前后分成兩塊L[0][32], R[0][32]。
5. 加密過(guò)程,對(duì)R[i][32]進(jìn)行擴(kuò)展變換成48位數(shù),方法如下, 記為E(R[i][32])
32, 1, 2, 3, 4, 5,
4, 5, 6, 7, 8, 9,
8, 9, 10, 11, 12, 13,
12, 13, 14, 15, 16, 17,
16, 17, 18, 19, 20, 21,
20, 21, 22, 23, 24, 25,
24, 25, 26, 27, 28, 29,
28, 29, 30, 31, 32, 1,
6. 將E(R[i][32])與K[i][48]作異或運(yùn)算,得到48位數(shù),將48位數(shù)順序分成8份,6位一份,B[8][6]。
7. 使用S[i]替換B[i][6]。過(guò)程如下: 取出B[i][6]的第1位和第6位連成一個(gè)2位數(shù)m, m就是S[i]中對(duì)應(yīng)的行數(shù)(0-3),取出B[i][6]的第2到第5位連成一個(gè)4位數(shù)n(0-15),n就是S[i]中對(duì)應(yīng)的列數(shù),用S[i][m][n]代替B[i][6]。S是4行16列的對(duì)應(yīng)表,里面是4位的數(shù),一共有8個(gè)S,定義如下:
S[1]:
14,4,13,1,2,15,11,8,3,10,6,12,5,9,0,7,
0,15,7,4,14,2,13,1,10,6,12,11,9,5,3,8,
4,1,14,8,13,6,2,11,15,12,9,7,3,10,5,0,
15,12,8,2,4,9,1,7,5,11,3,14,10,0,6,13,
S[2]:
15,1,8,14,6,11,3,4,9,7,2,13,12,0,5,10,
3,13,4,7,15,2,8,14,12,0,1,10,6,9,11,5,
0,14,7,11,10,4,13,1,5,8,12,6,9,3,2,15,
13,8,10,1,3,15,4,2,11,6,7,12,0,5,14,9,
S[3]:
10,0,9,14,6,3,15,5,1,13,12,7,11,4,2,8,
13,7,0,9,3,4,6,10,2,8,5,14,12,11,15,1,
13,6,4,9,8,15,3,0,11,1,2,12,5,10,14,7,
1,10,13,0,6,9,8,7,4,15,14,3,11,5,2,12,
S[4]:
7,13,14,3,0,6,9,10,1,2,8,5,11,12,4,15,
13,8,11,5,6,15,0,3,4,7,2,12,1,10,14,9,
10,6,9,0,12,11,7,13,15,1,3,14,5,2,8,4,
3,15,0,6,10,1,13,8,9,4,5,11,12,7,2,14,
S[5]:
2,12,4,1,7,10,11,6,8,5,3,15,13,0,14,9,
14,11,2,12,4,7,13,1,5,0,15,10,3,9,8,6,
4,2,1,11,10,13,7,8,15,9,12,5,6,3,0,14,
11,8,12,7,1,14,2,13,6,15,0,9,10,4,5,3,
S[6]:
12,1,10,15,9,2,6,8,0,13,3,4,14,7,5,11,
10,15,4,2,7,12,9,5,6,1,13,14,0,11,3,8,
9,14,15,5,2,8,12,3,7,0,4,10,1,13,11,6,
4,3,2,12,9,5,15,10,11,14,1,7,6,0,8,13,
S[7]:
4,11,2,14,15,0,8,13,3,12,9,7,5,10,6,1,
13,0,11,7,4,9,1,10,14,3,5,12,2,15,8,6,
1,4,11,13,12,3,7,14,10,15,6,8,0,5,9,2,
6,11,13,8,1,4,10,7,9,5,0,15,14,2,3,12,
S[8]:
13,2,8,4,6,15,11,1,10,9,3,14,5,0,12,7,
1,15,13,8,10,3,7,4,12,5,6,11,0,14,9,2,
7,11,4,1,9,12,14,2,0,6,10,13,15,3,5,8,
2,1,14,7,4,10,8,13,15,12,9,0,3,5,6,11,
8. 將從B[i][6]經(jīng)過(guò)S得到的8個(gè)4位數(shù)連起來(lái)得到32位數(shù)。對(duì)這個(gè)數(shù)進(jìn)行如下變換:
16,7,20,21,29,12,28,17, 1,15,23,26, 5,18,31,10,
2,8,24,14,32,27, 3, 9,19,13,30, 6,22,11, 4,25,
得到的結(jié)果與L[i][32]作異或運(yùn)算,把結(jié)果賦給R[i][32]。
9. 把R[i-1][32]的值賦給L[i],從5開(kāi)始循環(huán)。直到K[16][48]結(jié)束。
10. 將最后的L,R合并成64位,然后進(jìn)行如下轉(zhuǎn)化得到最后的結(jié)果。這是對(duì)第4步的一個(gè)逆變化。
40, 8, 48, 16, 56, 24, 64, 32,
39, 7, 47, 15, 55, 23, 63, 31,
38, 6, 46, 14, 54, 22, 62, 30,
37, 5, 45, 13, 53, 21, 61, 29,
36, 4, 44, 12, 52, 20, 60, 28,
35, 3, 43, 11, 51, 19, 59, 27,
34, 2, 42, 10, 50, 18, 58, 26,
33, 1, 41, 9, 49, 17, 57, 25
以上是Des的加密過(guò)程,解密過(guò)程同樣,只需要把16個(gè)子密鑰K[i][48]的順序顛倒過(guò)來(lái)就行了。
評(píng)論
查看更多