1(i) What is Decryption? What is its need?

Decryption is the process of converting encrypted data (cipher text) back into its original
readable form (plain text) using a secret key or private key.

Need of Decryption

[Link] read the original message securely 2. To ensure confidential communication [Link] protect
data from unauthorized access

Real-Life Example

When you receive an OTP on WhatsApp, it is encrypted. Your phone decrypts it using a key so
that you can read it.

1(ii) Explain Cryptography and its applications

Cryptography is the technique of securing information by converting it into an unreadable

format so that only authorized users can access it. It uses mathematical algorithms and keys for
encryption and decryption.

Applications of Cryptography

1,Online Banking – Secure transactions [Link] – Stored in encrypted form [Link] –

Secure email communication [Link] Signatures – Verify sender identity 5.E-commerce –
Secure payment gateways

Real-Life Example

When you pay using UPI, cryptography protects your PIN and transaction details.

1(iii) What is Data Authenticity?

Data Authenticity ensures that the data is genuine and comes from a trusted source, and it has
not been altered during transmission.

Why it is important

[Link] fake data [Link] sender identity [Link] data integrity

Example

A digital signature on a PDF confirms that the document is original and not modified.

1(iv) Secret Key Cryptography and Public Key Cryptography

Secret Key Cryptography (Symmetric) :- [Link] key for encryption & decryption [Link] but key
sharing is difficult , Example: AES, DES
Public Key Cryptography (Asymmetric)

[Link] keys: Public key & Private key [Link] secure but slower

Example: RSA

Real-Life Example

WhatsApp uses public key cryptography to exchange keys securely.

1(v) Elements of a Cryptography Tool

Main elements are:

1. Plaintext – Original message [Link] Algorithm [Link] [Link] – Encrypted

message [Link] Algorithm

SECTION-B (Compulsory – 5 Marks)

2. What exactly do you know about RSA? Explain

RSA (Rivest–Shamir–Adleman) is a public key cryptography algorithm used for secure data
transmission.

Key Features

 Uses two keys: Public key & Private key

 Based on large prime numbers

 Provides confidentiality, authentication, and digital signatures

Working of RSA

1. Choose two large prime numbers

2. Generate public and private keys

3. Encrypt data using public key

4. Decrypt data using private key

Applications

 SSL/TLS certificates

 Secure email

 Digital signatures

Real-Life Example
When you open an HTTPS website, RSA helps in secure key exchange.

3(a) What do you mean by DNA Computing?

DNA computing, in the context of cryptography, refers to the use of DNA molecules as a
medium for computing and storing information, particularly for cryptographic applications. This
concept emerged from the idea of leveraging the massive parallelism and high storage density
of DNA molecules to perform complex computations. Here's a detailed explanation: 1. DNA as a
computing medium: DNA (Deoxyribonucleic acid) is a molecule that contains the genetic
instructions used in the development and function of all living organisms. In DNA computing,
the sequence of nucleotides (A, C, G, and T) in a DNA molecule is used to represent data. This
data can be processed using various biochemical techniques, such as PCR (Polymerase Chain
Reaction), DNA synthesis, and DNA sequencing. 2. Cryptographic applications: DNA computing
has been explored for various cryptographic applications, including: - DNA-based encryption:
Using DNA sequences to encrypt and decrypt messages. This approach relies on the difficulty of
sequencing and manipulating DNA molecules to ensure security. - DNA-based digital signatures:
Using DNA sequences to create digital signatures that are resistant to forgery. - DNA-based
cryptographic protocols: Developing cryptographic protocols, such as secure multi-party
computation and zero-knowledge proofs, using DNA computing. 3. Advantages: DNA computing
offers several advantages in cryptography, including: - High storage density: DNA molecules can
store a massive amount of data in a very small space. - Parallelism: DNA computing allows for
massive parallelism, enabling the processing of large amounts of data simultaneously. - Security:
DNA computing can provide a high level of security due to the difficulty of sequencing and
manipulating DNA molecules. 4. Challenges: Despite its potential, DNA computing in
cryptography faces several challenges, including: - Scalability: DNA computing is still in its
infancy, and scaling up the technology to practical levels is a significant challenge. - Error
correction: DNA computing is prone to errors, which can compromise the security and accuracy
of cryptographic applications. - Cost and feasibility: DNA computing is currently a costly and
labor-intensive process, making it challenging to implement in practice.

1. Quantum Cryptography

Quantum cryptography is a modern cryptographic technique that uses the principles of

quantum mechanics to secure communication. Unlike classical cryptography, which depends on
mathematical complexity, quantum cryptography relies on the laws of physics, making it highly
secure.

The most important concept in quantum cryptography is Quantum Key Distribution (QKD). In
QKD, encryption keys are transmitted using photons. According to quantum mechanics,
observing a quantum particle changes its state. Therefore, if an attacker tries to intercept the
key, the change in photon state immediately alerts the communicating parties.

Quantum cryptography ensures confidentiality, integrity, and eavesdropping detection. One of

its strongest features is the no-cloning theorem, which states that quantum data cannot be
copied. This makes quantum cryptography almost impossible to break.

Quantum cryptography is mainly used in military communication, banking systems, and

government data transmission, where extremely high security is required.

However, quantum cryptography also faces challenges such as high cost, limited distance of
communication, and the requirement of specialized hardware.

In conclusion, quantum cryptography offers an unbreakable security model based on physical

laws. Although currently expensive and complex, it is considered the future of secure
communication.

2. Digital Signature Algorithm (DSA)

The Digital Signature Algorithm (DSA) is a cryptographic algorithm used to verify the
authenticity and integrity of digital messages or documents. It ensures that the message has
been sent by a genuine sender and has not been modified during transmission.

DSA works by first creating a hash value of the message. This hash is then encrypted using the
sender’s private key to form a digital signature. The receiver decrypts the signature using the
sender’s public key and compares it with the newly generated hash of the received message. If
both hashes match, the message is considered authentic.

Digital signatures provide three important security services: authentication, data integrity, and
non-repudiation. This means the sender cannot deny sending the message.

DSA is widely used in online transactions, software distribution, e-governance systems, and
legal documents.

Despite its advantages, DSA requires careful key management and is computationally slower
compared to symmetric algorithms.

In summary, DSA plays a vital role in ensuring trust and security in digital communication
systems.

3. Difference between Symmetric and Asymmetric Encryption

Encryption techniques are broadly classified into symmetric and asymmetric encryption based
on the number of keys used.

In symmetric encryption, the same key is used for both encryption and decryption. It is faster
and efficient for encrypting large amounts of data. However, secure key sharing is a major
challenge. Examples include AES and DES.

In asymmetric encryption, two different keys are used: a public key for encryption and a private
key for decryption. This method is more secure but slower than symmetric encryption.
Examples include RSA and DSA.

Symmetric encryption is commonly used for file encryption, while asymmetric encryption is
mainly used for secure key exchange and digital signatures.

In conclusion, both encryption techniques have their own advantages and are often used
together in modern cryptographic systems.

4. Difference between IDS and IPS

Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) are security tools used to
protect computer networks from attacks.

IDS monitors network traffic and detects suspicious activities. It generates alerts when an
intrusion is detected but does not take direct action. IDS is mainly used for monitoring and
analysis.

IPS, on the other hand, not only detects intrusions but also prevents them by blocking
malicious traffic in real time. It works inline with the network.

IDS is like a CCTV camera, while IPS acts like a security guard who stops intruders.

Although IPS provides better protection, it requires careful configuration to avoid blocking
legitimate traffic.

In summary, IDS focuses on detection, while IPS focuses on prevention.

5. Three-Way Handshake

The three-way handshake is a process used in TCP (Transmission Control Protocol) to establish
a reliable connection between a client and a server.
First, the client sends a SYN (synchronize) request to the server. The server responds with SYN-
ACK, acknowledging the request. Finally, the client sends an ACK message to confirm the
connection.

This process ensures that both devices are ready to communicate and prevents unauthorized
connections.

The three-way handshake is essential for reliable data transfer in computer networks.

A real-life example is a phone call where one person calls, the other answers, and the
conversation begins after confirmation.

🔐 QUESTION 6 (a)

What are the response codes that can be received from a Web Application?

Web applications communicate the result of a client’s request using HTTP response codes.
These response codes inform the user or browser whether a request was successful, failed, or
requires further action. Each response code has a specific meaning and helps in debugging,
security handling, and proper communication between client and server.

Response codes are broadly classified into different categories. 2xx codes indicate successful
requests. For example, 200 (OK) means the request was processed successfully and the
response is returned properly. 3xx codes indicate redirection. A common example is 301
(Moved Permanently), which means the requested resource has been permanently moved to a
new location.

4xx codes represent client-side errors. 400 (Bad Request) occurs when the request is incorrect
or malformed. 401 (Unauthorized) indicates that authentication is required. 403 (Forbidden)
means access is denied even after authentication. 404 (Not Found) occurs when the requested
page does not exist.

5xx codes represent server-side errors. 500 (Internal Server Error) indicates that the server
failed to process a valid request due to internal issues.

These response codes help developers understand application behavior and improve security
and performance.

In conclusion, HTTP response codes play an essential role in web communication by clearly
indicating the status of client requests.
🔐 QUESTION 6 (b)

What are the steps to set up a firewall?

A firewall is a security mechanism used to control and monitor incoming and outgoing network
traffic based on predefined security rules. Setting up a firewall is a critical step in protecting
systems from unauthorized access and cyberattacks.

The first step in setting up a firewall is identifying security requirements, such as which services
and ports should be allowed or blocked. Next, the firewall software or hardware is installed on
the system or network. After installation, security rules are defined, specifying permitted and
denied traffic.

Once the rules are configured, access control policies are applied to restrict unauthorized users.
The firewall configuration is then tested to ensure legitimate traffic is allowed and malicious
traffic is blocked. Finally, the firewall must be continuously monitored and updated to protect
against new threats.

Firewalls act as the first line of defense in network security and help prevent cyberattacks such
as hacking and malware infections.

In summary, proper firewall setup ensures secure and controlled network communication.

🔐 QUESTION 7 (a)

What steps will you take to secure a server?

Securing a server is essential to protect sensitive data, applications, and services from cyber
threats. A secure server ensures availability, confidentiality, and integrity of data.

The first step is to regularly update the operating system and installed software to fix security
vulnerabilities. Strong authentication methods such as complex passwords and multi-factor
authentication should be used. A firewall must be enabled to restrict unauthorized network
access.

Unnecessary services and ports should be disabled to reduce attack surfaces. Installing antivirus
and intrusion detection systems helps detect malicious activities. Regular data backups should
be taken to prevent data loss. Monitoring server logs helps identify suspicious behavior.

By implementing these steps, the server becomes resistant to cyberattacks.

In conclusion, server security requires continuous monitoring and proactive maintenance to
ensure safe and reliable operation.

🔐 QUESTION 7 (b)

What is Kerberos and how does it work?

Kerberos is a network authentication protocol designed to provide secure authentication for

users and services over an insecure network. It uses a ticket-based system instead of
transmitting passwords over the network.

Kerberos consists of three main components: the Client, the Authentication Server (AS), and
the Ticket Granting Server (TGS). When a user logs in, the Authentication Server verifies the
user’s credentials and issues a Ticket Granting Ticket (TGT). This ticket is then used to request
access to network services from the Ticket Granting Server.

Once verified, the TGS issues a service ticket that allows the user to access the required service
without re-entering the password. This process ensures secure authentication and prevents
replay attacks.

Kerberos is widely used in enterprise environments, cloud systems, and distributed networks.

In summary, Kerberos provides a secure and efficient authentication mechanism by using

encrypted tickets instead of passwords.