What is Cryptography?
• Cryptography is the practice of protecting information by turning it into a secret
code so that only the intended receiver can read it.
Purpose:
• To ensure confidentiality, integrity, and security of data.
Why is Cryptography Important?
Key Concepts of Cryptography
Encryption: Turning data into a secret code.
Decryption: Converting secret data back into its original form.
In cryptography, keys are secret values used to encrypt and decrypt data, ensuring its
security.
Symmetric Key:
•Same key is used for both encryption and decryption.
•Both parties need to share the same key.
•Example: AES (Advanced Encryption Standard).
Asymmetric Key:
•Two keys: Public key (for encryption) and private key (for decryption).
•Public key can be shared openly, private key stays secret.
•Example: RSA (Rivest-Shamir-Adleman).
Session Key:
•Temporary key used for encrypting data during a session.
•Discarded after the session ends.
Hashing:
•Hash keys are used to create a unique fingerprint (hash) of data to check its integrity.
Key Management involves generating, sharing, storing, and exchanging keys securely.
In short, keys are the core of cryptography, helping to secure data by controlling who can
read or modify it.
Hashing: Creating a unique "fingerprint" of data
• Turning data into a fixed-size string (hash), which is unique to that data.
• Example: Hashing a password ensures no one can see the actual password.
Importance:
• Verifies data integrity (detects changes in data).
Types of Cryptography
Symmetric Cryptography:
1. Same key used to lock and unlock data.
2. Example: DES, AES (Advanced Encryption Standard).
Asymmetric Cryptography:
1. Two keys: Public key (to encrypt) and Private key (to decrypt).
2. Example: RSA (Rivest-Shamir-Adleman).
What is a Digital Signature?
• Like a handwritten signature but in digital form.
• Ensures that the message hasn’t been altered and that the sender is who they
claim to be.
How it Works:
• Signed with a private key, verified with a public key.
cryptographic applications
Secure Communication:
•Email encryption (e.g., PGP)
•Messaging apps (e.g., Signal, WhatsApp)
Online Banking and E-commerce:
•SSL/TLS encryption for transactions
Digital Signatures:
•Document authentication (e.g., PDF signing)
•E-contracts and agreements
Virtual Private Networks (VPNs):
•Encrypts internet traffic for privacy
Blockchain and Cryptocurrencies: Bitcoin and other blockchain applications
Password Protection and Authentication: Hashing passwords (e.g., bcrypt, PBKDF2)
File and Disk Encryption: Encrypting files and disks (e.g., BitLocker, FileVault)
Secure Software and Code Signing: Verifying software authenticity
Secure Cloud Storage: Encryption for cloud data (e.g., Google Drive, Dropbox)
Two-Factor Authentication (2FA): Time-based OTPs (e.g., Google Authenticator, SMS 2FA)
Digital Rights Management (DRM): Protecting digital content (e.g., Spotify, Netflix)
Note
Please refer to the notebook for detailed information, not just the slides, which
are for quick reference.
For this section, you may Cryptography and Network Security by Behrouz A
Forouzan and Deep Mukhopadhayay.
You may also refer the suggested text books