56-bit encryption cracked in three days

The Electronic Frontier Foundation (EFF) last week deciphered a 56-bit string of encrypted code in just three days. The lobby group claims its success is proof that the encryption level for exported US software is too low.

There has been wide criticism of 56-bit encryption, which forms the basis of the US government's Data Encryption Standard (DES). But until now, it has taken thousands of networked computers 39 days to crack the code.

The EFF developed its own hardware for the task. Called the DES Cracker, it claims it built the system for under $250,000. The computer uses around 1,500 chips, but a spokesman stressed that no new technology was used to build it.

Barry Steinhardt, EFF Executive Director, said: "If a small non-profit organisation can crack DES, your competitors can too." John Gilmore, EFF co-founder, added: "Now that the public knows, it will not be fooled into buying products that promise real privacy but only deliver DES."

Dennis Keiler, Ovum analyst, said: "This should show the US government that technology alone does not guarantee security, even 228-bit encryption will be cracked, once chips get faster. Instead of laws, we need authentication agencies, which will be liable for fraud."

But in the US, the security debate is still focussed on encryption. The EFF's stance will be backed up this Wednesday with a separate advertising campaign launched by lobby group, Americans for Computer Privacy, which will demand stronger export levels via print, broadcast and Internet media.

The DES Cracker demonstration was part of a "DES Challenge II" competition organised by the RSA Laboratory. As winner of the competition, the EFF was awarded $10,000.