Encryption Revision Notes

When data is sent over a network, it travels through various devices and channels that may be accessible to unauthorised users. Without protection, sensitive information such as passwords, personal details, or financial data can be intercepted and misused. Encryption is necessary to maintain privacy and prevent data breaches during transmission.

• Data transmitted over networks can be intercepted by attackers.
• Sensitive information must be protected to maintain confidentiality.
• Encryption provides a security layer to prevent unauthorised access.

Encryption converts original data, known as plaintext, into an unreadable format called ciphertext using a specific algorithm and an encryption key. Only someone with the correct decryption key can reverse this process to retrieve the original data. This ensures that even if intercepted, the data remains unintelligible to unauthorised parties.

For example, if the message 'HELLO' is encrypted with a key, it might become 'XJQZT'. Without the key, the ciphertext cannot be understood.

• Plaintext is transformed into ciphertext using an encryption algorithm and key.
• Ciphertext appears as random or scrambled data to unauthorised users.
• Decryption requires the correct key to restore the original message.

Encryption relies on keys, which are pieces of information used by algorithms to encrypt and decrypt data. Only users with the correct key can access the original information. Keys must be kept secret and managed carefully to maintain security.

For instance, in symmetric encryption, the same key is used for both encryption and decryption, so it must be shared securely. In asymmetric encryption, different keys are used for encryption and decryption, enhancing security but requiring more complex management.

• Keys control the encryption and decryption processes.
• Keeping keys secret is critical to data security.
• Different encryption methods use keys differently (symmetric vs asymmetric).

If data is sent without encryption, anyone intercepting the transmission can read and misuse the information. This can lead to identity theft, financial loss, or damage to reputation. Additionally, unencrypted data is vulnerable to tampering, which can compromise data integrity.

For example, sending a password over an unencrypted connection can allow attackers to capture and use it maliciously.

• Unencrypted data can be intercepted and read by attackers.
• Data integrity can be compromised through tampering.
• Sensitive information exposure can cause serious harm.

Encryption is a fundamental security measure in data transmission that protects confidentiality and integrity. It is widely used in technologies such as HTTPS for secure websites, VPNs for private connections, and encrypted messaging apps.

Understanding encryption helps in recognising the importance of secure communication and the risks of transmitting data without protection.

• Encryption protects data confidentiality and integrity during transmission.
• It is essential for secure online communication.
• Awareness of encryption helps prevent data breaches and cyber attacks.

Data encryption is a fundamental technique used to protect information from unauthorized access during storage or transmission. It transforms readable data, called plaintext, into an unreadable format, called ciphertext, using an algorithm and a key. Only those with the correct key can reverse this process to recover the original data. Encryption ensures confidentiality and is essential in securing communications over insecure channels such as the internet.

• Encryption converts plaintext into ciphertext to prevent unauthorized reading.

Symmetric encryption uses the same secret key for both encrypting and decrypting data. This means the sender and receiver must both have access to the identical key and keep it confidential. Because the same key is used, symmetric encryption algorithms tend to be faster and require less computational power, making them suitable for encrypting large amounts of data.

For example, if Alice wants to send a secret message to Bob, she encrypts the message using a shared secret key. Bob then uses the same key to decrypt the message back into readable form.

However, the main challenge is securely distributing and managing the secret key, especially if the communicating parties are distant or have never met. If the key is intercepted or leaked, the encryption is compromised.

• Uses one secret key for both encryption and decryption.
• Fast and efficient for large data volumes.

Asymmetric encryption, also known as public-key encryption, uses a pair of mathematically related keys: a public key and a private key. The public key is shared openly and used to encrypt data, while the private key is kept secret by the owner and used to decrypt data.

For instance, if Bob wants to receive a confidential message from Alice, he shares his public key with her. Alice encrypts the message using Bob's public key, and only Bob can decrypt it using his private key. This eliminates the need to share a secret key beforehand, solving the key distribution problem of symmetric encryption.

The security of asymmetric encryption relies on the difficulty of deriving the private key from the public key. Common algorithms include RSA and ECC (Elliptic Curve Cryptography). Asymmetric encryption is computationally more intensive and slower than symmetric encryption, so it is often used to securely exchange symmetric keys rather than encrypt large data directly.

• Uses a key pair: public key (encryption) and private key (decryption).
• Public key can be shared openly; private key must remain secret.

The public key is designed to be distributed widely and used by anyone who wants to send encrypted data to the key owner. Because the public key cannot decrypt the data it encrypts, it is safe to share openly.

The private key is kept confidential by the owner and is the only key capable of decrypting data encrypted with the corresponding public key. Protecting the private key is critical; if it is compromised, the security of all communications using that key pair is lost.

This separation of keys enables secure communication without prior sharing of secret keys, and also supports digital signatures, where the private key is used to sign data and the public key verifies the signature.

• Public key encrypts data; can be shared openly.

Because symmetric encryption is faster but requires secure key sharing, and asymmetric encryption solves key distribution but is slower, many secure systems combine both methods.

A common approach is to use asymmetric encryption to securely exchange a symmetric key, which is then used for the bulk data encryption. This hybrid method leverages the strengths of both techniques.

For example, in HTTPS (secure web browsing), asymmetric encryption establishes a secure connection and exchanges keys, then symmetric encryption protects the data transfer efficiently.

• Symmetric encryption is efficient but requires secure key sharing.