Discrepancy with reported key size for EDE ciphers in Qualys SSL Labs The following two cipher suites were reported by Qualys SSL Labs as being 112-bit:


SSL_CK_DES_192_EDE3_CBC_WITH_MD5 
TLS_RSA_WITH_3DES_EDE_CBC_SHA


However, all other references I can find say that they are 168-bit, which aligns with my understanding of 3DES EDE: three independent 56-bit keys.

I trust Qualys to be correct on the matter, and I presume that they have some sort of justification for classifying these suites as 112-bit rather than 168-bit, but I don't know enough about the SSL and TLS implementation of EDE to understand why.

I also have no idea why the CK_DES suite has a 192 in the name.

Are they correct? What's the deal with the discrepancies?
DES has been specified to take a 64 bit key, but only 56 of them are used. The remainder are parity bits.


  The key ostensibly consists of 64 bits; however, only 56 of these are actually used by the algorithm. Eight bits are used solely for checking parity, and are thereafter discarded. Hence the effective key length is 56 bits


For 3DES the nominal key size is $3 \cdot 64 = 192$ bits and $3 \cdot 56 = 168$ of them are used.

The 3DES construction suffers from a meet-in-the-middle attack, which reduces the cost of breaking it to about $2^{112}$ operations, leading to an effective security of 112 bits.