[1970-01-01]

It means you should not use it for anything important, because it can be decrypted by the public with little effort. If you look back, it has been this way for quite awhile. My gripe is with the clickbait title 'Break Me If You Can'

https://nvd.nist.gov/vuln/detail/cve-2016-2183

[tostrstrudel]

BREAKMEIFYOUCAN! is the default factory key programmed into every MIFARE Ultralight C chip by NXP.

[1970-01-01]

Ok that makes much more sense.

[tptacek]

How exactly would you decrypt a 3DES ciphertext "with little effort"?

[1970-01-01]

It's supported in hashcat

[some_furry]

Is this a bit?

[1970-01-01]

Have you tried it?

[some_furry]

We're talking about symmetric ciphers and you're talking about password cracking software.

Triple-DES has 168 bit keys. Even if you use a meet-in-the-middle attack, your attack cost has an exponent of 112 (with an associated memory cost with an exponent of 88).

That's not practically exploitable today.

If you think I'm wrong, here's a single block message encrypted with 3DES, then hex-encoded. Have fun:

  924db449f52ea976

But really, the bigger problem is Sweet32.