Subscribe to Hexnode Blog
Get fresh insights, pro tips, and thought starters–only the best of posts for you.
BackWhat is Data Encryption Standard (DES)?
The Data Encryption Standard (DES) is a symmetric-key encryption algorithm that encrypts and decrypts data using the same secret key. IBM originally developed DES in the 1970s, and the U.S. National Bureau of Standards (now the National Institute of Standards and Technology, or NIST) adopted it as a federal encryption standard in 1977.
DES played a significant role in the early adoption of commercial cryptography. Organizations used it to protect financial transactions, government information, and sensitive business data for many years. However, advances in computing power made DES vulnerable to brute-force attacks, and modern organizations no longer consider it secure for protecting sensitive information.
Today, organizations use stronger encryption algorithms such as the Advanced Encryption Standard (AES) to protect data.
Why DES is no longer secure
DES uses a 56-bit encryption key, which modern computers can crack through brute-force attacks in a practical amount of time. As computing capabilities improved, researchers demonstrated that attackers could recover DES encryption keys by systematically testing every possible key.
Because of these limitations, NIST withdrew DES as an approved encryption standard. Organizations should not use DES to protect new systems or sensitive data.
DES highlights the importance of selecting encryption algorithms that can withstand advances in computing power.
How DES works
DES encrypts data by processing fixed-size blocks of plaintext through multiple rounds of mathematical transformations.
| Stage | Purpose |
|---|---|
| Plaintext input | Receives data that requires encryption |
| Key generation | Derives round keys from the secret 56-bit key |
| Encryption rounds | Performs 16 rounds of substitution and permutation operations |
| Ciphertext output | Produces encrypted data for storage or transmission |
| Decryption | Uses the same secret key to recover the original plaintext |
Because DES uses symmetric encryption, both the sender and receiver must securely share the same encryption key.
DES vs AES
AES replaced DES as the modern encryption standard because it provides significantly stronger security.
| DES | AES |
|---|---|
| Uses a 56-bit key | Supports 128-bit, 192-bit, and 256-bit keys |
| Encrypts 64-bit data blocks | Encrypts 128-bit data blocks |
| Vulnerable to brute-force attacks | Considered secure for modern applications when properly implemented |
| No longer approved for protecting sensitive data | Widely used for government, enterprise, and commercial encryption |
Organizations should always choose AES or another modern, approved encryption algorithm instead of DES.
How Hexnode helps protect encrypted data
Hexnode UEM helps organizations strengthen data protection by configuring encryption on supported devices, enforcing device security policies, deploying operating system updates, managing approved applications, and monitoring device compliance from a centralized console.
Hexnode UEM also supports remote security actions such as enterprise wipe and device lifecycle management. These capabilities help organizations protect encrypted data stored on managed endpoints, while modern encryption standards such as AES provide the underlying cryptographic protection.
FAQs
Most organizations no longer use DES to protect sensitive information because attackers can break its 56-bit key with modern computing resources. Legacy systems may still use DES, but organizations should replace it with stronger encryption algorithms.
The Advanced Encryption Standard (AES) replaced DES as the preferred encryption standard. AES provides stronger security, supports larger key sizes, and remains widely used to protect sensitive data.
