Consider a keyed block encryption function E and message M broken
into blocks M_1, M_2,.... At each block consider a possible
binary function before encryption with inputs I_1 and I_2 and output
O_1, then encryption of O_1 with output O_2, then another binary
function with inputs I_3=O_2 and I_4, with output O_3 = ciphertext.
If possible output taps from which the inputs for the next block
are considered, they may include I_1, I_2, or O_1 before encryption,
and O_2 or O_3 after encryption. By arranging different combinations
of outputs of block_i-1 to inputs of block_i, we may obtain the
variety of modes of DES, plus some others. Inputs may also be
constants, so these possibilities should also be considered.
Describe the modes of DES in these terms, and analyze the other
possible modes that result from these input/output pairings. Which
of these may be useful and which are not? Why or why not? Justify
your answers.