Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper details a distributed brute-force system for performing exhaustive key searches on the Data Encryption Standard (DES) using AWS EC2, achieving a throughput of approximately 108 million keys per second across 37 instances. The authors conducted 15 trials to measure the time and cost associated with searching various keyspace offsets, revealing that while small offsets are limited by instance boot latency, larger offsets lead to linear growth in search time. The findings indicate that while a full exhaustive search of the DES keyspace would take around 21 years and cost approximately $1.2 million, it remains feasible for well-funded attackers to execute bounded-subspace attacks at negligible costs.
Exhaustive key searches on DES can now be executed in a day for about $1.2 million, making it alarmingly accessible for attackers using cloud resources.
The Data Encryption Standard (DES), with its 56-bit key, has been considered cryptographically broken since 1998. However, a concrete, reproducible measurement of the cost and time required to perform an exhaustive key search using today's commodity cloud infrastructure has not been widely reported in recent literature. In this paper we present a distributed brute-force system built on AWS EC2 that partitions the $2^{56}$ keyspace across 37 \texttt{c6i.2xlarge} instances running a C/OpenMP worker, achieving a measured throughput of $2.91$\,M\,keys/s per instance (${\sim}108 \times 10^6$ keys/s aggregate). We conduct 15 independent trials covering keyspace offsets from $10^6$ to $1.5 \times 10^{10}$ keys, measuring wall-clock time and monetary cost per trial. For small offsets ($\leq 10^8$), total time is dominated by AWS instance boot latency (${\approx}\;90$\,s), yielding a mean of $116.8\pm20.1$\,s at \$0.41 per attack. For larger offsets the search time dominates and grows linearly: a key at offset $1.5{\times}10^{10}$ requires ~${\approx} \; 87$ minutes and \$18. At the measured aggregate throughput of 108\,M\,keys/s, exhausting the full $2^{56}$ keyspace with these 37 instances would take ${\approx} \; 21$ years; however, because the workload is embarrassingly parallel and cloud capacity is elastic, the same search can be traded for money almost linearly. Extrapolating our measured cost, a complete exhaustive search would cost ${\approx} \; \$1.2$M and, with a sufficiently large fleet, could be completed in about one day. The system is thus practical for bounded-subspace attacks at negligible cost, and full DES exhaustion, while expensive, is firmly within reach of a well-funded attacker using only commodity cloud resources.