Chapter V: Encryption

By: Dr. Jaber M. Jaber

28 March 2020

Contents
Definitions ............................................................................................................................................... 3
Cryptography ...................................................................................................................................... 3
Plaintext .............................................................................................................................................. 3
Ciphertext ........................................................................................................................................... 3
Encryption ........................................................................................................................................... 3
Decryption........................................................................................................................................... 3
Cipher .................................................................................................................................................. 3
Key....................................................................................................................................................... 3
Cryptanalysis ....................................................................................................................................... 3
Encryption Algorithms & Keys ................................................................................................................ 3
Ingredients Of An Encryption Scheme/System ................................................................................... 3
Strong Encryption ............................................................................................................................... 3
Key Size ............................................................................................................................................... 3
Computationally Secure Encryption Scheme/System ........................................................................ 3
Symmetric Encryption ............................................................................................................................. 4
Operational Mode............................................................................................................................... 4
Principal Symmetric Encryption Algorithms ....................................................................................... 4
Shared Key Distribution ...................................................................................................................... 5
Session Key ...................................................................................................................................... 5
Permanent Key ................................................................................................................................ 5
Asymmetric Encryption ........................................................................................................................... 5
Operational Modes ............................................................................................................................. 5
Secrecy ............................................................................................................................................ 5
Authentication ................................................................................................................................ 6
Secrecy & Authentication Combined .............................................................................................. 6
Applications Of Public Key Cryptography ........................................................................................... 6
 Encryption/Decryption.................................................................................................................... 6
Digital Signatures ............................................................................................................................ 7
Key Exchange .................................................................................................................................. 7
Offered Services By Asymmetric Encryption ...................................................................................... 7
Session Key Exchange ..................................................................................................................... 7
Verification Of Data Integrity .......................................................................................................... 7
Digital Signature .............................................................................................................................. 8
Non-Repudiation ............................................................................................................................. 8
Principal Asymmetric Encryption Algorithms ..................................................................................... 8
Key Management Infrastructure......................................................................................................... 8
Public Key Infrastructures (PKIs) ..................................................................................................... 8
Top-Down Trust Model ................................................................................................................... 8
Digital Certificates ........................................................................................................................... 9
Secure Internet Transaction Example Via PKI ................................................................................. 9
Quantum Cryptography ........................................................................................................................ 10
Definition .......................................................................................................................................... 10
Operational Mode............................................................................................................................. 10
Principal Quantum Cryptography Algorithms & Techniques ............................................................ 10

Chapter V: Encryption By: Dr. Jaber M. Jaber Page 2 of 10

Definitions
Cryptography
Science of secret writing.

Plaintext
Original message.

Ciphertext
Transformed message.

Encryption
Plaintext  ciphertext process.

Decryption
Ciphertext  plaintext process.

Cipher
Algorithm: Secret method of writing.

Key
Some critical information used by the cipher, known only to sender and/or receiver.

Cryptanalysis
Attempting to discover plaintext or key or both.

Encryption Algorithms & Keys

Ingredients Of An Encryption Scheme/System
1. Plaintext
2. Encryption Algorithm
3. Secret Key(s)
4. Ciphertext
5. Decryption Algorithm

Security depends on the secrecy of the key, not the secrecy of the algorithm.

Strong Encryption
An encryption algorithm needs to be strong. This means that an attacker who knows the algorithm,
some pieces of ciphertext, and some plaintext-ciphertext pairs cannot deduce the plaintext or the key.

Key Size
n
A key of n bits has 2 possible values.

Computationally Secure Encryption Scheme/System

An encryption scheme/system is computationally secure if:
 Cost of breaking the cipher exceeds value of information.

Chapter V: Encryption By: Dr. Jaber M. Jaber Page 3 of 10

  Time needed to break cipher exceeds lifetime of information.

Symmetric Encryption
 Also known as:
 Conventional Encryption.
 Secret Key Encryption.
 Sender and receiver use same shared secret key.

Operational Mode

 Encryption: C = EK (P)
 Decryption: P = DK (C) = DK [EK (C)]

Principal Symmetric Encryption Algorithms

 DES : Data Encryption Standard:
 The most widely used encryption scheme.
 Key length: 56 bits.
 The plaintext is processed in 64-bit blocks.
 Concerns about the algorithm and the key length.
 RC2 and RC4.
 RC5:
 Suitable for hardware and software.
 Fast, simple.
 Key length: Variable.
 Low memory requirements.
 High security.
 IDEA: International Data Encryption Algorithm:
 Key length: 128 bits.
 Used in PGP.
 Blowfish:
 Easy to implement.
 High execution speed.
 Run in less than 5 KB of memory.
 AES: Advanced Encryption Standard.

Chapter V: Encryption By: Dr. Jaber M. Jaber Page 4 of 10

Shared Key Distribution
 A key could be selected by A and physically delivered to B.
 A third party could select the key and physically deliver it to A and B.
 If A and B have previously used a key, one party could transmit the new key to the other,
encrypted using the old key.
 If A and B each have an encrypted connection to a third party C, C could deliver a key on the
encrypted links to A and B.

Session Key
Data encrypted with a one-time session key. At the conclusion of the session, the key is destroyed.

Permanent Key
Used between entities for the purpose of distributing session keys.

Asymmetric Encryption
 Also known as Public Key Encryption.
 Sender and receiver use different secret key.

Operational Modes
Secrecy

 Encryption: C = EKUb(M)
 Decryption: M = DKRb(C) = DKRb [EKUb(M)]

Chapter V: Encryption By: Dr. Jaber M. Jaber Page 5 of 10

Authentication

 Signing: C = EKRa(M)
 Verifying: M = DKUa(C) = DKUa [EKRa(M)]

Secrecy & Authentication Combined

Note: Sign first and then encrypt, so only the receiver can decrypt and then verify.

Applications Of Public Key Cryptography

Encryption/Decryption
 Provide secrecy.
 The sender encrypts a message with the recipient’s public key.
 The receiver decrypts the encrypted message with its private key.

Chapter V: Encryption By: Dr. Jaber M. Jaber Page 6 of 10

Digital Signatures
 Provide authentication.
 The sender sign a message with its private key.
 The receiver verify the signed message with the sender’s public key.

Key Exchange
 Two sides cooperate to exchange a session key for symmetric encryption.

Offered Services By Asymmetric Encryption

Session Key Exchange

Once exchanged, Alice & Bob then use the shared secret key to communicate using symmetric
encryption.

Verification Of Data Integrity

Use of one-way hash function (also called digest function) will generate a digest message (digital
signature).

Chapter V: Encryption By: Dr. Jaber M. Jaber Page 7 of 10

Digital Signature
With public key cryptography, a message can be encrypted with the sender’s private key. In this case,
the entire message serves as a digital signature. Disadvantages are speed & storage requirements.

Alternative: Add a small authentication block to the message e.g. take the hash of the message and
encrypt just the hash with the sender’s private key. The result is a much more compact and efficient
signature.

Non-Repudiation
Non-repudiation is the assurance that someone cannot deny the validity of something. Non-
repudiation is a legal concept that is widely used in information security and refers to a service, which
provides proof of the origin of data and the integrity of the data.

Principal Asymmetric Encryption Algorithms

 RSA (Rivest, Shamir, Adelman): The most widely implemented.
 Diffie-Hellman: Exchange a secret key securely.

Key Management Infrastructure

Public Key Infrastructures (PKIs)
 A PKI is a system for publishing the public-key values.
 Can then build up a chain of trusts.

Top-Down Trust Model

Chapter V: Encryption By: Dr. Jaber M. Jaber Page 8 of 10

Note: Need 100% trust in Root CA’s public key, may be written into software like Web browsers.

Digital Certificates
 Electronic document that binds an entity (e.g. individual) to a public key
 Signed by a third party called a Certificate Authority (CA)
 Certificate user trusts CA to issue valid certificates.
 CA’s public key may be validated by another (e.g. higher-level) CA
 A Digital Certificate doesn’t last forever. It normally expires after a certain time and must be
renewed
 It may be revoked:
 If the subject’s private key is compromised
 If there is a change in status of the subject
 If the CA’s private key is compromised

Secure Internet Transaction Example Via PKI

a) The enterprise requests a digital certificate from PKI.

b) Using his Web browser, the client opens the enterprise’s Web site and gets its digital
certificate name and reference (serial number).
c) The client’s browser connects to the PKI Web site and download the enterprise’s digital
certificate. The client can then verify the authenticity of the digital certificate.
d) The client generates a symmetric session key, encrypts it using the enterprise public key, and
then sends it to the enterprise.
e) The enterprise receives the session key and then decrypts it using its private key. At this
moment, both the client and the enterprise share the same secret key and can therefore use
it when communicating with each other during the whole session.

Chapter V: Encryption By: Dr. Jaber M. Jaber Page 9 of 10

Quantum Cryptography
Definition
Quantum cryptography is the science of exploiting quantum mechanical properties to perform
cryptographic tasks. The best known example of quantum cryptography is quantum key distribution
which offers an information-theoretically secure solution to the key exchange problem.

Operational Mode

Principal Quantum Cryptography Algorithms & Techniques

 8884 algorithm
 BB84 protocol
 Two-States protocol
 Six-States protocol
 Entangled photons technique

Chapter V: Encryption By: Dr. Jaber M. Jaber Page 10 of 10