Exam CISSP topic 1 question 400 discussion

DES has a key length of 56. It is very short key length.

D. Inadequate key length. DES uses a fixed key length of 56 bits, which is considered inadequate for modern security standards. Advances in computing power over the years have made it feasible to perform exhaustive key search attacks (brute-force attacks) on DES within a reasonable time frame. As a result, DES is no longer considered secure for protecting sensitive data, and it has been replaced by more robust encryption algorithms with longer key lengths, such as the Advanced Encryption Standard (AES). AES, for example, supports key lengths of 128, 192, and 256 bits, making it much more resistant to brute-force attacks.

D. Inadequate key length

One of the weaknesses of the Data Encryption Standard (DES) is its key size. DES uses a 56-bit key, which is considered too short by modern cryptographic standards. This key size can be easily brute-forced by attackers with sufficient computing power, allowing them to decrypt DES-encrypted data relatively easily.

D is correct

Given answer D is right: DES, the Data Encryption Standard, can no longer be considered secure. While no major flaws in its innards are known, it is fundamentally inadequate because its 56-bit key is too short