"Although administrative access to the cell still uses single-DES for encryption of network traffic, that single-DES key is time limited and may be resistant to brute-force key recovery prior to its expiration."
This wasn't created until after CloudCracker can break DES, but to be honest OpenAFS is not the only one either. DOCSIS I think do something similar too. I wonder if anyone has created ASICs to break DES.