Bokler Software Corp. - Cryptographic Tools for Software DevelopersAboutBoklerBoklerHomeTDEScipher Data Encryption LibrariesHow to License Bokler's Cryptographic Libraries
 
TDEScipher™ &  DEScipher™ Libraries
 

Quick Look:

 
TDEScipher/DLL
ver 2.2


TDEScipher/ActiveX
ver 2.1

TDEScipher/DLL version 2.4 Features:

  • TDEScipher/DLL now includes a type library for improved performance, type safety, and ease-of-use.
  • TDEScipher offers 168-bit keylength Triple-DES; the strongest encryption algorithm available.
  • Validated for compliance with ANSI X9.52 and NIST's FIPS PUB 46-3.
  • Royalty-free - no run-time distribution charges.
  • Supports all ISO 8372 modes of TDEA (TECB, TCBC, TCFB and TOFB).
  • Interface supports handling keys, IVs and strings as "Hex Strings" for convenience.
  • Allows encryption/decryption of buffers in-place - reduces memory requirements.
  • Supports all Windows® development environments incl. C/C++, Visual Basic, FoxPro, Delphi, .NET, etc.
  • High performance multithreaded DLL designed for server applications - supports simultaneous processing of multiple data streams.
  • The distribution includes:
    • Visual C++ and Visual Basic source-code examples; incl. a complete ASP component
    • A detailed Developer's Reference Manual

Can I use TDEScipher/DLL to build IIS/ASP/MTS components?

How do I obtain a license for TDEScipher/DLL?

View/download source code examples.

View TDEScipher/DLL functions.

 

TDEScipher/ActiveX version 2.1 Features:

  • TDEScipher is royalty-free - no run-time distribution charges,
  • TDEScipher offers 168-bit keylength Triple-DES; the strongest encryption algorithm available.
  • Validated for compliance with ANSI X9.52 and NIST's FIPS PUB 46-3.
  • Supports all Visual Basic data types - including Unicode and ANSI strings,
  • Both Triple Data Encryption Algorithm (TDEA) and Data Encryption Standard (DES) algorithms are available as native methods in a single control.
  • Supports all ISO 8372 modes of TDEA (TECB, TCBC, TCFB and TOFB).
  • Supports multiple instantiation of the control to process separate data streams simultaneously,
  • Simple control interface for ease-of-use.
  • Compatible with Visual development environments which support COM and ActiveX controls.
  • Includes fully-commented Visual Basic source code examples - including a file hashing utility, and a password validation example,
  • Internal Fault Event simplifies error trapping and debugging.
  • On-line and context-sensitive HELP utility.
  • The distribution includes:
    • Visual Basic source-code examples; incl. a file hashing utility & password verification
    • A detailed Developer's Reference Manual

How do I obtain a license for TDEScipher/ActiveX?

View/download source code examples (see the Access db example)

View TDEScipher/ActiveX functions.

 

Background:

The Data Encryption Standard (DES) and triple-DES algorithms are symmetric or secret key algorithms. This means that the key value used to encrypt the data is also required to decrypt the data. Asymmetric or public key algorithms on the other hand use a key pair; one key is used to encrypt, the other to decrypt. Due to its computational overhead public key algorithms have been relegated to use in key exchange and digital signature applications. Bulk data encryption (anything more than a few hundred bits) is the exclusive domain of symmetric algorithms such as DES and triple-DES.

DES is the product of a program initiated at the National Bureau of Standards (NBS), now called the National Institute of Standards and Technology (NIST), in 1972. The purpose of this program was to develop a single cryptographic standard to protect data during storage and transmission. It was reasoned that a single standard would greatly facilitate interoperability of cryptographic systems, and lend itself to establishment of a testing and certification process. Requirements were formulated, solutions were solicited, and after some time the NBS selected an algorithm submitted by IBM. This algorithm was derived from one developed by IBM several years earlier called LUCIFER. Following a lengthy review process, in November 1976 this algorithm was adopted as the Federal standard for data encryption. It was described in a document called Federal Information Processing Standard Publication 46 (FIPS PUB 46), published shortly after its adoption as the DES.

Today DES is the most widely deployed cryptographic algorithm in the world. Since its adoption by the NIST, DES has also been adopted by a number of other standards bodies for a variety of security applications. The American National Standards Institute (ANSI) approved DES as a private sector standard (ANSI X3.92) in 1981; since then it has been widely deployed in many secure commercial systems.

Standards bodies representing the banking and finance industry adopted DES or standards based on DES. Two groups within ANSI, the American Bankers Association, and the Financial Standards Group of the International Standards Organization (ISO), adopted DES for securing both retail and wholesale financial transactions. In addition, passage of the Computer Security Act of 1987 (Public Law 100-235) effectively required all agencies of the Federal Government to use DES to protect sensitive information stored on computer systems.

Popularity of the DES continues today as evidenced by the fact that it is still being specified in a variety of applications requiring secure communications, electronic commerce, and data privacy. Confidence in DES is inspired by the absence of any findings indicative of any algorithmic weaknesses in its 20-plus year track record. No other cryptographic algorithm in common use today can substantiate this level of security.

Despite the strength of the DES algorithm, advances in computer technology continue to reduce the cost of brute-force searches of its 56-bit keyspace. To address this issue the American National Standards Institute (ANSI) under the aegis of the American Banking Association has developed the X9.52 standard - the Triple Data Encryption Algorithm (TDEA), also known as triple-DES. ANSI X9.52 specifies three rounds of DES operations to effectively increase the keylength to 168 bits. Triple-DES is not a new concept, but ANSI X9.52 codifies its practice by defining a specific set of modes for its implementation.

The TDEA was not designed to replace DES, but to extend its lifetime, greatly increase its security, and leverage investments in the technology. It utilizes the same 64-bit block size as used in DES, and preserves its four modes of operation. TDEA employs three invocations (or rounds) of DES as follows:

1.       DES-encrypt block with key value K1

2.       DES-decrypt block with key value K2

3.       DES-encrypt block with key value K3

By taking advantage of the well-established security of the DES algorithm, and extending its key length through multiple rounds of encryption TDEA has become the strongest encryption algorithm available to the public. It may be used in any application requiring maximum security with negligible risk.

Applications for TDEScipher include communications, banking, software distribution and copy protection, and electronic/Internet commerce; e.g. file or message privacy - data that must be stored on or transported between unsecured hosts may be protected from unauthorized viewing.

TDEScipher is available as both a DLL and as an ActiveX control to support all popular Windows® development environments including Visual Basic, VBA (Word, Excel, Access, etc), C, C++, FoxPro, Power Builder and others- including the new .NET environment (TDEScipher/DLL only, version 2.4).
DEScipher and TDEScipher Compared
The DEScipher libraries implement the Data Encryption Standard (DES),  as defined in FIPS PUB 46-2 and ANSI X3.92. DES utilizes a 56-bit key, and was developed by the US Government to provide strong security for sensitive data. DES is the most widely used cryptographic algorithm today, employed in a variety of applications including communications, banking, and Internet commerce. DEScipher allows you to add the security of strong cryptography to your applications with easy-to-use software components.
The TDEScipher libraries implement both the Triple Data Encryption Algorithm (TDEA) as defined by FIPS PUB 46-3 (ANSI X9.52), and DES. TDEA provides a 168-bit keylengths; it was developed under the sponsorship of the American Banker's Association to provide extremely strong cryptographic protection for financial data. By taking advantage of the DES' proven algorithmic strength, and extending its effective keylength through multiple rounds of encryption TDEA has become the most secure encryption technology available today. TDEScipher allows you to add this level of security to your applications with easy-to-use software components.


Copyright ©, 1995-2003 Bokler Software Corp. All rights reserved. DEScipher, TDEScipher and HASHcipher are trademarks of Bokler Software Corp. The "animated_cipher.gif" is copyrighted by Bokler Software Corp. Microsoft, Windows, Visual Basic, Visual C++, .NET and ActiveX are trademarks of Microsoft Corp.