From: Bodo Möller <bodo@openssl.org>
Date: Tue, 5 Mar 2002 15:29:30 +0000 (+0000)
Subject: Rephrase statement on the security of two-key 3DES.
X-Git-Tag: OpenSSL_0_9_6d~20^2~97
X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff_plain;h=2c17323e156de12e63a68311d611262c977e7fce;hp=870694b3da75d0757b400e802caea9d98510b8a4

Rephrase statement on the security of two-key 3DES.

  [Chosen plaintext attack: R. Merkle, M. Hellman: "On the Security of
  Multiple Encryption", CACM 24 (1981) pp. 465-467, p. 776.

  Known plaintext angriff: P.C. van Oorschot, M. Wiener: "A
  known-plaintext attack on two-key triple encryption", EUROCRYPT '90.]
---

diff --git a/doc/crypto/des_modes.pod b/doc/crypto/des_modes.pod
index 36b77c454d..da75e8007d 100644
--- a/doc/crypto/des_modes.pod
+++ b/doc/crypto/des_modes.pod
@@ -204,8 +204,8 @@ just one key.
 =item *
 
 If the first and last key are the same, the key length is 112 bits.
-There are attacks that could reduce the key space to 55 bit's but it
-requires 2^56 blocks of memory.
+There are attacks that could reduce the effective key strength
+to only slightly more than 56 bits, but these require a lot of memory.
 
 =item *