Module 21: Cryptography and Data Protection
Cryptography
Definition:
The art of securing information by transforming it into unreadable format using mathematical
techniques.
Goals (CIA + NAR):
• Confidentiality
• Integrity
• Authentication
• Non-repudiation
Encryption Algorithms
Symmetric Encryption
• Uses the same key for encryption & decryption.
• Examples:
o AES (Advanced Encryption Standard) – secure and fast
o DES (Data Encryption Standard) – outdated
Asymmetric Encryption
• Uses public and private key pairs.
• Examples:
o RSA – widely used for secure data transmission
o ECC (Elliptic Curve Cryptography)
o Diffie-Hellman – key exchange algorithm
MD5 and MD6 Hash Calculators
Hashing: Converts input into a fixed-length string (digest).
• MD5:
o Output: 128-bit hash
o Fast but vulnerable to collision attacks
• MD6:
o Output: Variable length, more secure than MD5
o Suitable for digital signatures and checksums
Public Key Infrastructure (PKI)
Framework for managing digital certificates and public-key encryption.
Components:
• Certificate Authority (CA)
• Registration Authority (RA)
• Public/Private Keys
• Digital Certificates (X.509)
Email Encryption
Method Description
S/MIME Uses PKI to encrypt email content
Uses public-key encryption for email confidentiality &
PGP (Pretty Good Privacy)
integrity
GPG (GNU Privacy Guard) Open-source alternative to PGP
Disk Encryption
Tool Feature
BitLocker (Windows) Full disk encryption
File Vault (macOS) Disk-level protection
VeraCrypt (Windows/Linux) Open- source, supports hidden volumes
LUKS (Linux) Secure disk encryption standard
Cryptanalysis
Study of attacking cryptographic systems to break encryption.
Techniques:
• Brute Force
• Dictionary Attacks
• Frequency Analysis
• Side-Channel Attacks
Key Stretching
• Strengthens weak keys (e.g., passwords) against brute-force attacks.
• Uses hashing algorithms repeatedly.