International Journal of Scientific Engineering and Research (IJSER)

www.ijser.in
ISSN (Online): 2347-3878
Volume 2 Issue 11, November 2014

Data Encryption and Decryption by Using Triple

DES and Performance Analysis of Crypto System
Karthik .S1, Muruganandam .A2
1
Research Scholar, Periyar University, Salem, Tamilnadu, India
2
Research Scholar, Bharathiar University, Coimbatore, Tamilnadu, India

Abstract: This paper contains a technique for secret communication using cryptography. It is a technique which is used to protect the
important data. The secret message is encrypted by a block cipher based on two cryptographic algorithms, the Data Encryption Standard
(DES) and the Triple Data Encryption Algorithm (TDEA) which may be used by Federal organizations to protect sensitive data. This
algorithm uniquely defines the mathematical steps required to transform data into a cryptographic cipher and also to transforms the
cipher back to the original form with block length of 128 bits and key length of 256 bits. This paper provides a performance comparison
between the most common encryption algorithms: DES, 3DES, AES and Blowfish.

Keywords: DES, Triple DES, AES, Cryptography

1. Introduction (EFF) collaborated to publicly break a DES key in 22 hours

and 15 minutes. The algorithm is believed to be practically
Data Encryption Standard (DES) is the block cipher which secure in the form of Triple DES, although there are
takes a fixed-length string of plaintext bits and transforms it theoretical attacks. In recent years, the cipher has been
through a series of complicated operations into another cipher superseded by the Advanced Encryption Standard (AES).
text bit string of the same length. It is a symmetric encryption
technique which means both sender and receiver use a shared 1.2 Cryptography
key to encrypt and/or decrypt the data as shown in the below Cryptography means data secure, it helps to ensure data
Figure 1.1: The problem of this technique is that if the key is privacy, maintain data integrity, authenticate communicating
known to others the entire conversation is compromised. The parties, and prevent repudiation.
3DES block size is 64 bits and also uses a key to customize
the transformation, so that decryption can only be performed
by those who know the particular key used to encrypt. The
key basically consists of 64 bits however, only 56-bits of
these are actually used by the algorithm. Eight bits are used
solely for checking parity, and thereafter discarded. Hence the
“effective key length is 56-bits” and it is always quoted.
Every 8 th bit of the selected key is discarded i.e., positions 8,
16, 24, 32, 40, 48, 56, 64 are removed from the 64-bit key
leaving behind only the 56-bit key.

Figure 1.2: Key schedules for Encryption and Decryption

The above Figure 1.2: as shown in key schedule for

encryption and decryption algorithm which generates the sub
keys. Initially, 56 bits of the key are selected from the initial
64 by Permuted Choice 1 (PC-1) and the remaining eight bits
are either discarded or used as parity check bits. The 56 bits
are divided into two 28 bit halves; each half is treated
separately. In successive rounds, both halves are rotated left
by one and two bits (specified for each round), and then 48
Figure 1.1: Conversion of Secret key sub key bits are selected by Permuted Choice 2 (PC-2) i.e. 24
bits from the left half and 24 from the right. The rotations
1.1 History of DES (denoted by “<<<”) mean that a different set of bits is used in
DES algorithm used for encryption of the electronic data. It each sub key, each bit is used in approximately 14 out of the
was developed in the early 1970s at IBM and based on an 16 sub keys.
earlier design by Horst Feistel, the algorithm submitted to the
National Bureau of Standards (NBS) to propose a candidate 1.2.1 Cryptography Goals
for the protection of sensitive unclassified electronic
This section explains the five main goals behind using
government data. It is now taken as unsecured cause of its
Cryptography. Every security system must provide a bundle
small size and a brute force attack is possible in it. In January
of security functions that can assure the secrecy of the system.
1999 distributed .net and the Electronic Frontier Foundation

Paper ID: J2013403 24 of 31

Licensed Under Creative Commons Attribution CC BY
 International Journal of Scientific Engineering and Research (IJSER)
www.ijser.in
ISSN (Online): 2347-3878
Volume 2 Issue 11, November 2014
These functions are usually referred to as the goals of the (b) Privacy
security system. These goals can be listed under the following Ensure that private data is not accessed by other users.
five main categories:
(c) Reliability
• Authentication: Authentication means before sending and Only responsible users are provided to access these data.
receiving data using the system, the receiver and sender
identity should be verified. (d) Resource sharing
• Secrecy or Confidentiality: In this function is how most Many users can use the same system and still can work
people identify a secure system. It means only the independently
authenticated people are able to interpret the message or
content and no one else. 1.3 AES (Advanced Encryption Standard)
• Integrity: Integrity means that the content of the AES is a new cryptographic algorithm that can be used to
communicated data is assured to be free from any type of protect electronic data. Specifically, AES is an iterative,
modification between the end points (sender and receiver). symmetric-key block cipher that can use keys of 128, 192,
The basic form of integrity is packet check sum in IPv4 and 256 bits, and encrypts and decrypts data in blocks of 128
packets. bits (16 bytes). A Public-key ciphers, can use a pair of keys,
• Non-Repudiation: In this function implies that neither the symmetric key ciphers use the same key to encrypt and
sender nor the receiver can falsely deny that they have sent decrypt data. The new AES will certainly become the de facto
a certain message. standard for encrypting all forms of electronic information,
• Service Reliability and Availability: Since secure systems replacing DES. AES-encrypted data is unbreakable in the
usually get attacked by intruders, which may affect their sense that known cryptanalysis attack can decrypt the AES
availability and type of service to their users. cipher text without using a brute-force search through all
possible 256 bit keys. Security is no longer an afterthought in
1.2.2 Advantages anyone's software design and development process. It will
i. DES has been around a long time (since 1977), even no greatly increase the reliability and safety of your software
real weaknesses have been found: the most efficient attack systems. DES is a block cipher, as shown in below Figure 1.3.
is still brute force.
ii. DES is an official United States Government standard; the
Government is required to re-certify, DES every five years
and ask it be replaced if necessary. DES has been re-
certified in 1983, 1987, and 1992.
iii. DES is also an ANSI and ISO standard. Since DES was
designed to run on 1977 hardware, it is fast in hardware
and relatively fast in software.

1.2.3 Disadvantages
i. The 56 bit key size is the biggest defect of DES and the
Figure 1.3: Encryption and decryption with DES
chips to perform one million of DES encrypt or decrypt
operations a second are available (in 1993).
ii. Hardware implementations of DES are very fast. 2. Overview of Encryption and Decryption
iii. DES was not designed for software and hence runs
relatively slowly. Encryption is a process of coding information which could
iv. In a new technology it is improving a lot of possibility to either be a file or mail message into cipher text a form
break the encrypted code, so AES is preferred than DES. unreadable without a decoding key in order to prevent anyone
except the intended recipient from reading that data.
1.2.4 Objectives Decryption is the reverse process of converting encoded data
i. Provide functionality to store a file in an encrypted format to its original un-encoded form, plaintext. A key in
which can only be accessed by providing the correct cryptography is a long sequence of bits used by encryption /
password. decryption algorithms. The following example to represents a
ii. Modify the system to make the directories password hypothetical 40-bit key:
protected.
iii. To review a short history of DES and define the basic 1010 1001 10011110 00011100 01010101
structures.
iv. To describe the building block elements of DES 2.1 Types of Encryption
v. To describe the round keys generation process and to Depending on the type of encryption, information can be
analyze data encryption standard. displayed as various numbers, letters, or symbols. Those who
work in cryptography fields make it their job, to encrypt
1.2.5 Motivation information or to break codes to receive encrypted
information.
(a) Security
Secures data from being accessed by any malicious user.

Paper ID: J2013403 25 of 31

Licensed Under Creative Commons Attribution CC BY
 International Journal of Scientific Engineering and Research (IJSER)
www.ijser.in
ISSN (Online): 2347-3878
Volume 2 Issue 11, November 2014
2.1.1 Manual Encryption string to verify it. This can serve as a type of error correction
Manual encryption is a type that involves the use of in encoding. Hashing a message and providing that value to
encryption software. These are computer programs that your correspondents ensures that they can hash the message
encrypt various bits of information digitally. Manual themselves and compare the values. As long as the two output
encryption involves the user's participation completely. The strings match, recipients know the message is complete and
files wants to encrypt are chosen, and then an encryption type unaltered.
is chosen from a list that the security system provides.
3. Cryptographic
2.1.2 Transparent Encryption
Transparent encryption is another type of computer software 3.1 Symmetric Key Cryptography
encryption. It can be downloaded onto a computer to encrypt
everything automatically. One of the most important secure The DES most widely used symmetric key cryptographic
types of encryption available because it doesn't leave method is the Data Encryption Standard (DES) as shown in
anything that might be forgotten when using manual below Figure 3.1: It uses a fixed length, 56-bit key and an
encryption. Every executable application and file created in efficient algorithm to quickly encrypt and decrypt messages.
the computer has an encrypted copy that can withstand power It can be easily implemented in the encryption and decryption
surges and protects information in case a computer is stolen. process even faster. In general, increasing the key size makes
the system more secure. A variation of DES, called Triple-
2.1.3 Symmetric Encryption DES or DES - EDE (Encrypt-Decrypt-Encrypt), uses three
All encryption is done via a computer software program. You applications of DES and two independent DES keys to
can easily encrypt information by yourself. One of the produce an effective key length of 168 bits.
simplest ways to do this is through symmetric encryption.
Here, a letter or number coincides with another letter or
number in the encryption code. You can take any written text
and substitute letters and numbers for their coded counterpart,
thus encrypting the text.

2.1.4 Asymmetric Encryption

Asymmetric encryption is a secure and easy way that can be
used to encrypt data that you will be receiving. It is generally
done electronically. A public key is given out to whomever
you want or posted somewhere for the public to see. They can
encrypt information using the key and send it to you. This is Figure 3.1: Symmetric Key – Triple DES
often done when writing emails. This means encrypt the data
with the public key, it can only be read again by whomever Despite the efficiency of symmetric key cryptography, it has a
the private key has. fundamental weak spot-key The International Data
Encryption Algorithm (IDEA) was invented by James Massey
2.2 Types of Decryption 1991. IDEA uses a fixed length, 128-bit key (larger than DES
2.2.1 Symmetric Decryption but smaller than Triple-DES). It is also faster than Triple-
In symmetric encryption, the same mathematical equation DES. In the early 1990s, Don Rivest of RSA Data Security,
both encrypts and decrypts the data. The following example, Inc., invented the algorithms RC2 and RC4. These use
a simple letter substitution cipher, such as A=B, B=C, etc., is variable length keys and are claimed to be even faster than
symmetrical because you simply reverse the process to IDEA.
decrypt the message. If you send a message using a
symmetric encryption method, the recipients must also have 3.2 Implementation of Triple DES (3DES)
the key to decrypt the document. In 1998 a standard ANS X9.52 and named Triple Data
Encryption Algorithm (TDEA).
2.2.2 Asymmetric Decryption
Asymmetric decryption methods, also known as public-key a. Block cipher with symmetric secret key
decryption, use a system involving a pair of linked keys. In b. Block length = 64 bits
this system, anything encoded with one key requires the other c. Key length = 56, 112 or 168 bits
key to decrypt, and so on. When you encode a message using
someone’s public key, you know that only a recipient 3DES was created because DES algorithm, invented in the
possessing the corresponding private key can read it. early 1970s using 56-bit key. The effective security 3DES
provides is only 112 bits due to meet-in-the-middle attacks.
2.2.3 Hashing Triple DES runs three times slower than DES, but is much
Hashing is a form of encryption that uses a specialized one- more secure if used properly. The procedure for decrypting
way encryption key. If you hash a given volume of data, it something is the same as the procedure for encryption, except
will produce a unique output string to that data, but it is it is executed in reverse. In DES, data is encrypted and
impossible to reconstruct the data from the output string. You decrypted in 64 -bit chunks. The input key for DES is 64 bits
can re-encode the original data and compare it to the result long; the actual key used by DES is only 56 bits in length.

Paper ID: J2013403 26 of 31

Licensed Under Creative Commons Attribution CC BY
 International Journal of Scientific Engineering and Research (IJSER)
www.ijser.in
ISSN (Online): 2347-3878
Volume 2 Issue 11, November 2014
The least significant (right-most) bit in each byte is a parity Has 112 bits of security, not 3 56 = 168
bit, and should be set so that there are always an odd number
of 1s in every byte. These parity bits are ignored, so only the Triple DES algorithm uses three iterations of common DES
seven most significant bits of each byte are used, resulting in cipher. It receives a secret 168-bit key, which is divided into
a key length of 56 bits. This means that the effective key three 56-bit keys.
strength for Triple DES is actually 168 bits because each of
the three keys contains 8 parity bits that are not used during • Encryption using the first secret key
the encryption process. • Decryption using the second secret key
• Encryption using the third secret key

Encryption:
c = E3 (D2 (E1 (m)))

Decryption:
m = D1 (E2 (D3(c)))

Using decryption in the second step during encryption

provides backward compatibility with common DES
algorithm. In these case first and second secret keys or second
and third secret keys are the same whichever key.
Figure 3.2: Triple DES Using 64 bytes
c = E3 (D1 (E1 (m))) = E3 (m)
The above Figure 3.2 as shown in Triple Data Encryption c = E3 (D3 (E1 (m))) = E1 (m)
Standard (DES) is a type of computerized cryptography
where block cipher algorithms are applied three times to each It is possible to use 3DES cipher with a secret 112-bit key. In
data block. The key size is increased in Triple DES to ensure this case first and third secret keys are the same.
additional security through encryption capabilities. Each
block contains 64 bits of data. Three keys are referred to as c = E1 (D2 (E1 (m)))
bundle keys with 56 bits per key. There are three keying
options in data encryption standards: Triple DES is advantageous because it has a significantly
sized key length, which is longer than most key lengths
a. All keys being independent affiliated with other encryption modes. DES algorithm was
b. Key 1 and key 2 being independent keys replaced by the Advanced Encryption Standard and Triple
c. All three keys being identical DES is now considered to be obsolete. It derives from single
DES but the technique is used in triplicate and involves three
sub keys and key padding when necessary. Keys must be
Key option 3 as shown in Figure 3.3: triples DES. The triple
increased to 64 bits in length Known for its compatibility and
DES key length contains 168 bits but the key security falls to
flexibility can easily be converted for Triple DES inclusion.
112 bits.
The following Figure 3.4 and Figure 3.5 is the block diagram
of 3DES as shown in below.

Figure 3.3: Working of Triple DES Figure 3.4: Block Diagrams: 3DES Encryption

(i) Algorithm:
Run DES three times:

ECB mode:
If K2 = K3, this is DES
Backwards compatibility
Known not to be just DES with K4

Paper ID: J2013403 27 of 31

Licensed Under Creative Commons Attribution CC BY
 International Journal of Scientific Engineering and Research (IJSER)
www.ijser.in
ISSN (Online): 2347-3878
Volume 2 Issue 11, November 2014
Table 4.1: Comparison results using Crypto++
Megabytes(2^20 Time MB/
Algorithm
bytes) Processed Taken Second
Blowfish 256 3.976 64.386
Rijndael (128-bit key) 256 4.196 61.01
Rijndael (192-bit key) 256 4.817 53.145
Rijndael (256-bit key) 256 5.308 48.229
DES 128 5.998 21.34
(3DES)DES-XEX3 128 6.159 20.783
(3DES)DES-EDE3 64 6.499 9.848
Figure 3.5: Block Diagrams: 3DES Decryption

4. Performance Analysis of Data Encryption

Algorithms

In this area intends to give the readers for the necessary

background to understand the key differences between the
compared algorithms.

1) DES: (Data Encryption Standard), was the first encryption

standard to be recommended by NIST (National Institute of
Standards and Technology). It is based on the IBM
proposed algorithm called Lucifer. DES became a standard
in 1974. Since that time, many attacks and methods
recorded that exploit the weaknesses of DES, which made
it an insecure block cipher.
2) 3DES: An enhancement of DES, the 3DES (Triple DES)
encryption standard was proposed. In this standard the Figure 4.2: Comparison results using Crypto++ - Graph
encryption method is similar to the one in original DES but
applied 3 times to increase the encryption level.
3) AES: (Advanced Encryption Standard), is the new
encryption standard recommended by NIST to replace
DES. Rijndael (pronounced Rain Doll) algorithm was
selected in 1997, after a competition to select the best
encryption standard. Brute force attack is the only effective
attack known against it, in which the attacker tries to test all
the characters combinations to unlock the encryption. Both
AES and DES are block ciphers.
4) Blowfish: Blowfish is a variable length key, 64-bit block
cipher. The Blowfish algorithm was first introduced in
1993. This algorithm can be optimized in hardware
applications though it's mostly used in software
applications. It suffers from weak keys problem, no attack
is known to be successful against.

4.1 Related Work and Comparative Results Figure 4.3: Comparative Execution time in Encryption
To give more prospective about the performance of the Algorithm System 1
compared algorithms, this section discusses the results
obtained from other resources. The below Table 4.1 contains
the speed benchmarks for some of the most commonly used
cryptographic algorithms. These results are good to have an
indication about what the presented comparison results. It is
shown that Blowfish and AES have the best performance
among others. And both of them are known to have better
encryption (i.e. stronger against data attacks) than the other
two.

Paper ID: J2013403 28 of 31

Licensed Under Creative Commons Attribution CC BY
 International Journal of Scientific Engineering and Research (IJSER)
www.ijser.in
ISSN (Online): 2347-3878
Volume 2 Issue 11, November 2014
The comparison was performed on the following algorithms:
DES, Triple DES (3DES), RC2 and AES (Rijndael). The
results shows that AES outperformed other algorithms in both
the number of requests processes per second in different user
loads, and in the response time in different user-load
situations.

5. Simulation Environment and Discussion

This simulation uses the provided classes in .NET

environment to simulate the performance of DES, 3DES and
AES (Rijndael). In this Triple Data Encryption Standard
implementation used here under the name Cryptograph.NET.
This implementation is thoroughly tested and is optimized to
give the maximum performance for the algorithm. The
Figure 4.4: Comparative Execution time in Encryption
implementation uses managed wrappers for DES, 3DES and
Algorithm System 2
Rijndael available in System.Security.Cryptography that
wraps unmanaged implementations available in CryptoAPI.
The result is easy to observe that Blowfish has an advantage
TDESCryptoServiceProvider, TripleDESCryptoServiceProvr
over other algorithms in terms of throughput and also
and Rijndael Managed respectively. There is only a pure
comparison between the algorithms in stream mode using
managed implementation of Rijndael available in
Chain Block Chaining (CBC).
System.Security.Cryptography, which was used in the tests.
The results showed that Blowfish has a very good 5.1 Performance Evaluation Methodology
performance compared to other algorithms. Also it showed This section describes the techniques and simulation choices
that AES has a better performance than 3DES and DES. made to evaluate the performance of the compared
Amazingly it shows also that 3DES has almost 1/3 throughput algorithms. In addition to that, we will discuss the
of DES, or in other words it needs 3 times than DES to methodology related parameters like: system parameters,
process the same amount of data. experiment factor(s), and experiment initial settings.

The above experiments for comparing the performance of the 5.1.1 Simulation Procedure
different encryption algorithms implemented inside .NET Consider the different sizes of data blocks (0.5MB to 20MB)
framework. Their results are close to the ones shown in the algorithms were evaluated in terms of the time required to
Figure 4.3. encrypt and decrypt the data block. All the implementations
were exact to make sure the accurate results The Simulation
program accepts three inputs:

a. Algorithm,
b. Cipher Mode and
c. Data block size.

After a successful execution, the data generated, encrypted,

and decrypted are shown in the Figure 5.1. Note: Most of the
characters cannot appear since they do not have character
representation. Another comparison is made after the
successful encryption/decryption process to make sure that all
the data are processed in the right way by comparing the
generated data (the original data blocks) and the decrypted
data block generated from the process.

Figure 4.5: Comparison results using .NET implementations.

Paper ID: J2013403 29 of 31

Licensed Under Creative Commons Attribution CC BY
 International Journal of Scientific Engineering and Research (IJSER)
www.ijser.in
ISSN (Online): 2347-3878
Volume 2 Issue 11, November 2014
difference between ECB and CBC is 0.059896 seconds,
which is relatively small.

Figure 5.3: Performance Results with CBC Mode

This section showed the simulation results obtained by

running the four compared encryption algorithms using
different Cipher Modes. Different load have been used to
determine the processing power and performance of the
Figure 5.1: GUI Environment Simulation Program
compared algorithm.
5.1.2 Simulation Results
This section show the results obtained from running the 6. Conclusion and Future work
simulation program using different data loads. The results
show the impact of changing data load on each algorithm and The presented simulation results showed that 3DES has a
the impact of Cipher Mode (Encryption Mode) used. better performance result with ECB and CBC than other
common encryption algorithms used. In this paper we present
a performance evaluation of selected symmetric encryption
5.1.3 Performance Results with ECB algorithms. The selected algorithms are AES, DES, 3DES,
The first set of experiments were conducted using ECB mode,
Blowfish, RC2, and RC4. In case of changing key size, it can
the results are shown below in Figure 5.2. The results show
be seen that higher key size leads to clear change in the
the superiority of DES algorithm over other algorithms in
battery and time consumption. In future the work may be
terms of the processing time. It shows also that AES
extensive by including the schemes and techniques over
consumes more resources when the data block size is
different types of data such as image, sound and video and
relatively big. The results shown here are different from the
rising a stronger encryption algorithm with high speed and
results, since the data block sizes used here are much larger
minimum energy consumption.
than the ones used in their experiment. Note: here 3DES
requires always more time than DES because of its triple
phase encryption characteristic. DES and 3DES are known to Acknowledgement
have worm holes in their security mechanism, Blowfish and
AES, on the other hand, do not have any so far. These results My sincere gratitude to The Management, and I am grateful
have nothing to do with the other loads on the computer since thank to our department staff members of computer science,
each single experiment was conducted multiple times Don Bosco College, Dharmapuri, Tamil Nadu, India, for their
resulting in almost the same expected result. DES, 3DES and Support and motivation.
AES implementation in .NET is to be best.
References

[1] Aamer Nadeem, “A Performance Comparison of Data

Encryption Algorithm,” IEEE 2005.
[2] Abdul kader, Diaasalama and Mohiv Hadhoud,
“Studying the Effect of Most Common Encryption
Algorithms,” International Arab Journal of e-technology,
Vol.2. No.1.
[3] Aman Kumar, Sudesh Jakhar, Sunil Maakar, “Distinction
Figure 5.2: Performance Results with ECB Mode between Secret key and Public key Cryptography with
existing Glitches”, Volume: 1, 2012.
5.1.4 Performance Results with CBC [4] Data Encryption Standard (DES), FIPS PUB 46-3 -
In CBC requires more processing time than ECB because of 1999.
its key-chaining nature. The results show in Figure 5.3 [5] Feistel, Cryptography and Computer Privacy, Scientific
indicates also that the extra time added is not significant for American, Volume: 28, No.5, 1973.
many applications, knowing that CBC is much better than [6] Grabbe J, Data Encryption Standard: The Triple DES
ECB in terms of protection. The difference between the two algorithm illustrated Laissez faire city time, Volume: 2,
modes is hard then the results showed that the average No. 28, and 2003.

Paper ID: J2013403 30 of 31

Licensed Under Creative Commons Attribution CC BY
 International Journal of Scientific Engineering and Research (IJSER)
www.ijser.in
ISSN (Online): 2347-3878
Volume 2 Issue 11, November 2014
[7] Jian L and Ligan S, Study on Chaotic Cryptosystem for
Digital Image Triple Data Encryption Algorithm Modes
of Operation, ANSI X9.52 - 1998.
[8] Triple Data Encryption Algorithm Modes of Operation,
ANSI X9.52 - 1998.

Author Profile

Mr. S. Karthik received the M.C.A, in Sacred Heart College,

Tirupattur, and pursuing M.Phil., degree at Don Bosco College,
Sogathur, Dharmapuri, Tamilnadu, India. He is a Research Scholar
in the field of Network Security. He is very much enthusiastic in
NETWORKING area.

Mr. A. Muruganandam received the M.Sc., in Thanthai Hans

Roever College, Perambalur, and M.Phil., degree at Manonmaniam
Sundaranar University, Tirunelveli, Tamilnadu, in 1999 and 2004
respectively. He is an Assistant Professor cum Head in the Research
Department of Computer Science, Don Bosco College, Sogathur,
Dharmapuri, Tamilnadu, India. Presently pursuing Doctorate Degree
[Ph.D.] in Computer Science at Bharathiar University, Coimbatore.
He is a Research Scholar in the field of Wireless Sensor Networks.
He is very much interested in Networking area.. His ongoing
research focused on Selective Jamming Attacks in Wireless Sensor
Network

Paper ID: J2013403 31 of 31

Licensed Under Creative Commons Attribution CC BY