Nepedia
Back to Discover
Advanced Reader
💻

Encryption

technology Maturity 11-13 Next article →

Encryption is the process of transforming information so that only authorized parties can read it. In the field of cryptography, this process converts original information, known as plaintext, into an alternative form called ciphertext. Encryption does not physically stop someone from intercepting a message. Instead, it denies the intelligible content to any unauthorized interceptor. To perform this transformation, an encryption scheme usually uses an algorithm to generate a pseudo-random encryption key. An authorized recipient can easily decrypt the message using a key provided by the sender. However, breaking a well-designed scheme without a key requires massive computational resources and specialized skills.

Public key encryption keys
Public key encryption keys

There are two primary methods for managing these cryptographic keys: symmetric-key and public-key encryption. In a symmetric-key scheme, the same key is used for both encryption and decryption. This means all communicating parties must possess the exact same key to achieve secure communication. The German Enigma Machine utilized this method by using a new symmetric key every single day. In contrast, public-key cryptography, also known as asymmetric-key encryption, uses different keys. In this system, an encryption key is made public for anyone to use to lock a message. However, only the specific receiving party holds the private decryption key required to read the content. This method was first described in a secret document in 1973, long before the widespread use of modern digital systems.

Historically, encryption began with simple symbol replacement. One of the earliest examples was found in the tomb of Khnumhotep II in Egypt, dating back to 1900 BC. Ancient Greece and Rome later used non-standard symbol replacement for military purposes. A famous development was the Caesar cipher, which shifts plaintext letters a fixed number of positions along the alphabet. Around 800 AD, the Arab mathematician al-Kindi developed frequency analysis to crack such ciphers. This technique involves studying the frequency of letters in ciphertext to determine the shift. To counter this, al-Qalqashandi and Leon Battista Alberti described the polyalphabetic cipher, which varies the substitution alphabet as encryption proceeds.

Mechanical devices eventually replaced manual symbol shifting. Around 1790, Thomas Jefferson theorized the Wheel Cipher, or Jefferson Disk, to secure military correspondence. This device used a spool to jumble messages up to 36 characters. In 1917, US Army Major Joseph Mauborne independently developed the M-94, a similar device used by the military until 1942. During World War II, the Axis powers employed the Enigma Machine, a much more complex version of the M-94. The Enigma's letter combinations switched entirely every day, meaning users thought they had to test over 17,000 combinations within 24 hours to break it. Ultimately, the Allies used computing power to limit the combinations they needed to check, allowing them to break the code.

Modern encryption is essential for security and commerce on the internet. One of the first modern suites, DES, used a 56-bit key with 72,057,594,037,927,936 possible combinations. However, a brute-force attack by the EFF cracked DES in 1999 in just 22 hours and 15 minutes. Today, standards like AES use much larger keys to ensure security. For example, AES in 256-bit mode is extremely strong. A cipher using a 128-bit key or higher cannot be brute-forced because there are 3.4028237e+38 possible keys. When attackers cannot guess the key, they instead look for vulnerabilities in the cipher itself, such as inherent biases or side-channel attacks.

Encryption protects data in two main states: data in transit and data at rest. Data in transit refers to information moving across networks, such as the internet, mobile phones, or Bluetooth devices. Data at rest refers to information stored on physical devices like USB flash drives or computer hard drives. Protecting data at rest is vital because personal records can be exposed if a laptop is lost or stolen. Encryption also enables "crypto-shredding," a method for nearly instantaneous data erasure. On iOS devices, for instance, the cryptographic key is kept in dedicated effaceable storage. If the key is destroyed, the stored data becomes unreadable.

Beyond personal privacy, encryption is a requirement for many legal and professional systems. In 2007, a survey showed that 71% of companies used encryption for data in transit, while 53% used it for data in storage. Many industries must follow strict rules, such as the Payment Card Industry Data Security Standard (PCI DSS), which requires encrypting cardholder data. In healthcare, the HIPAA Security Rule involves encryption for protecting electronic health information. While currently an "addressable" specification, proposed updates in 2024 aim to make encryption mandatory. As computing power grows, especially with the rise of quantum computing, encryption technology must continue to evolve to remain secure.

788 words

Where will your curiosity go next?

Keep exploring at your chosen reading level.

🖼️ Images & Media (1)
File:Public key encryption keys.svg
Public key encryption keys.svg
More to explore

What is Nepedia?

A free, ad-free encyclopedia for children. Every article is written at five reading levels, so the same page works for a five-year-old and a fifteen-year-old — use the level switcher above to see this one change. No account needed to read.