Should One Test for Weak Keys in DES?

DES has four weak keys k for which E_k(E_k(m)) = m (see Question 60). There are also twelve semi-weak keys which come in pairs k1 and k2 and are such that E_k1(E_k2(m)) = m.

Since there are 2⁵⁶ possible DES keys the chance of picking a weak or semi-weak key at random is 2^-52. As long as the user-provided key is chosen entirely at random, they can be safely ignored when DES is used for encryption. Despite this, some users prefer to test whether a key to be used for DES encryption is in fact a weak key. Such a test will have no significant impact on the time required for encryption.

| Question 68|