A Review of network security algorithms-
Symmetric algorithms
[Link] Pokharkar, Miss. Sneha Shinde.
1
Student, SY BSc (CDS Design Analytics and Cyber Security Department, MIT ACSC, Alandi(D)
4628742@[Link]
2
Student, SY BSc (CDS Design Analytics and Cyber Security Department, MIT ACSC, Alandi(D)
4624629@[Link]
Abstract:
A symmetric key algorithm, also known as a secret-key algorithm, is a cryptographic method
in network security that utilizes a single shared key to both encrypt and decrypt data,
meaning both the sender and receiver must possess the same key to access the
information, making it fast but requiring secure key distribution due to the need for pre-
shared secrecy between parties involved; unlike asymmetric key algorithms where separate
public and private keys are used for encryption and decryption respectively.
Symmetric cryptography is also known as a private-key cryptography. It is called symmetric
because, it makes use of the same key for both encryption of plain text (sending message)
and decryption of cipher text (received message). That is, a single key known as secret key
is shared between the sender and the receiver. Compared with asymmetric cryptography,
symmetric cryptography is faster because of a single secret key and simplicity in its
algorithm. However, symmetric cryptography has severe problems like, it does not ensure
non-repudiation, and if the secret key is intercepted by an attacker then the attacker can
easily decrypt or alter all safety messages.
The authentication schemes which use symmetric cryptography are called as symmetric
cryptography based authentication schemes (SC-BAS). The SC-BAS is sub-categorized
into three groups: (i) Message Authentication Code Based Authentication schemes (MAC-
BAS), (ii) Hash Function Based Authentication schemes (HF-BAS), and (iii) TESLA Based
Authentication schemes (TESLA-BAS).
Keywords:
Shared secret, Key distribution challenge, Fast encryption/decryption.
Introduction:
A symmetric key algorithm, in network security and cryptography, is a method
where the same secret key is used by both the sender and receiver to encrypt
and decrypt data, meaning both parties need to possess the exact same key to
securely exchange information; this is often referred to as "shared secret"
cryptography, and is known for its fast processing speed but requires a secure
key distribution mechanism due to the shared key requirement.
Literature review:
Symmetric key algorithms are foundational in cryptography, where the same key
is used for both encryption and decryption processes. These algorithms are
crucial for ensuring confidentiality, integrity, and privacy in communication
systems, whether it's for securing data in transit or protecting sensitive
information at rest. This review explores the most prominent symmetric key
algorithms, their evolution, and the challenges associated with them.
Methodology:
A symmetric key algorithm in network security uses a single, shared secret key
to both encrypt and decrypt data, meaning both the sender and receiver must
possess the same key to access the information; this method is fast and efficient
for large data volumes but requires a secure key exchange mechanism to
distribute the key between parties involved in communication.
Main body of paper/Argument:
Symmetric key algorithms are widely used in network security and cryptography
for protecting data confidentiality and integrity. These algorithms are called
symmetric because they use the same key for both encryption and decryption.
Here’s a detailed breakdown of the methodology involved in symmetric key
algorithms:
1. Key Generation
Secret Key: A secret key is generated using a secure random process. Both the
sender and the receiver must have the same key for communication, making key
distribution one of the challenges of symmetric key encryption.
Key Length: The length of the key determines the security of the encryption. Longer
keys are more secure but require more computational resources.
2. Encryption Process
Plaintext Input: The original data (plaintext) is fed into the encryption algorithm.
Symmetric Key: The secret key is used to transform the plaintext into ciphertext.
The transformation is based on complex mathematical operations such as
substitution, permutation, and XOR operations.
Ciphertext Output: The resulting encrypted data, or ciphertext, is unintelligible and
can only be decrypted with the same key.
Common symmetric encryption algorithms include:
AES (Advanced Encryption Standard): The most widely used algorithm,
considered highly secure and efficient.
DES (Data Encryption Standard): An older algorithm now considered weak due to
its short key length.
Blowfish: A fast block cipher that uses variable-length keys.
RC4: A stream cipher that was once widely used but has known vulnerabilities.
3. Transmission
Secure Communication: The ciphertext is sent over an insecure network to the
intended recipient. Even if the communication is intercepted, without the secret key,
the ciphertext cannot be decrypted.
Potential Vulnerabilities: If the key is intercepted, the security of the system is
compromised. Thus, ensuring secure key distribution is a critical aspect of symmetric
encryption.
4. Decryption Process
Ciphertext Input: The encrypted data (ciphertext) is received by the intended
recipient.
Symmetric Key: The same secret key used during encryption is applied to the
ciphertext to transform it back into plaintext.
Plaintext Output: The original data is retrieved and can be used by the recipient.
5. Authentication and Integrity
Message Authentication Code (MAC): Symmetric key algorithms often use a MAC
to verify the integrity of the message. This ensures that the data has not been
tampered with during transmission.
HMAC (Hash-based MAC): A variant of MAC that combines a hash function with a
symmetric key for stronger integrity verification.
Digital Signatures: Though more common in asymmetric cryptography, digital
signatures can sometimes involve symmetric key cryptography, particularly in hybrid
systems.
6. Key Management and Distribution
Key Exchange Protocols: Secure distribution of the secret key is a major challenge
in symmetric encryption. Key exchange protocols like Diffie-Hellman (though
asymmetric in nature) and Kerberos are used to securely share keys over an
insecure network.
Key Storage: Keys must be stored securely to prevent unauthorized access. This is
achieved by using secure key storage systems like hardware security modules
(HSMs) or software-based key management solutions.
7. Security Considerations
Key Rotation: To mitigate the risks of key exposure or brute-force attacks,
symmetric keys are periodically rotated. This involves generating new keys and
securely transmitting them to authorized parties.
Brute-Force Resistance: The security of symmetric encryption relies heavily on the
key length. Short keys (e.g., 56-bit in DES) can be cracked by brute-force attacks,
while long keys (e.g., 256-bit in AES) are considered secure.
Chosen-Plaintext and Chosen-Ciphertext Attacks: Attackers may attempt to
manipulate the encryption process by choosing plaintext or ciphertext to reveal key
information. Modern algorithms like AES are designed to resist these types of
attacks.
8. Performance Considerations
Efficiency: Symmetric key algorithms are generally much faster than asymmetric
algorithms, making them suitable for large volumes of data.
Parallelization: Many symmetric algorithms, such as AES, are well-suited for parallel
processing, making them more efficient on modern hardware.
9. Applications of Symmetric Key Cryptography
VPNs (Virtual Private Networks): Symmetric encryption is widely used in VPNs to
encrypt internet traffic and ensure secure communications over public networks.
TLS/SSL: Symmetric key encryption is used in protocols like TLS/SSL for securing
web traffic, often in combination with asymmetric encryption for secure key
exchange.
Disk Encryption: Symmetric algorithms are used in full disk encryption tools (e.g.,
BitLocker, FileVault) to protect data at rest.
Wi-Fi Security: Protocols like WPA2 use symmetric encryption (e.g., AES) to secure
wireless communications.
Conclusion:
Symmetric key algorithms are a cornerstone of modern cryptography, offering
fast and efficient encryption solutions for securing data in networks. Their main
challenge lies in secure key management and distribution, but when used
appropriately, they provide strong protection against unauthorized access.
References:
[Link]://[Link]/publication/328005498_Systematic_literature_review_comparison_study_of_symmetric_key_and_asymmetric_key_algorithm
[Link]://[Link]/publication/328005498_Systematic_literature_review_comparison_study_of_symmetric_key_and_asymmetric_key
.
3 Basri B, 2016, Kriptografi Simetris dan Asimetris dalam Perspektif Keamanan Data dan Kompleksitas Komputasi, Jurnal Ilmu Komputer2, 2
p. 17–23. [2] Bisht N and Singh S, 2015
[Link] N and Singh S, 2015, A Comparative Study of Some Symmetric and Asymmetric Key Cryptography Algorithms International Journal of
Innovative Research in Science, Engineering and Technology4, 3 p. 1028–1031
[Link]://[Link]/[Link]/Ijarcs/article/download/3777/3258