Separate DES into its own module.

Eventually, use of DES should be protected with some sort of `Insecure` monad.