4.2.2.2 Triple DEA (TDEA)
All changes in this version
Title
Triple DEA (TDEA)
Control
Triple DEA is defined in [SP800-67] . TDEA encrypts and decrypts data in 64-bit blocks, using three 56-bit keys. Two variations of TDEA have been defined: two-key TDEA (2TDEA), in which the first and third keys are identical, and three-key TDEA, in which the three keys are all different (i.e., distinct). The use of two-key TDEA will no longer be approved for applying cryptographic protection (e.g., encryption) after December 31, 2015 (see [SP800-131A] ); however, two-key TDEA may continue to be used for processing already-protected information (e.g., decryption). Federal applications shall only use three distinct keys whenever using TDEA for applying cryptographic protection after December 31, 2015; see Table 2 in Section 5.6.1 and [SP800- 131A] for further guidance.