Please enable JavaScript.

Coggle requires JavaScript to display documents.

7.5 (DATA ENCRYPTION AND ENCRYPTION-RELATED TECHNIQUES (use Encryption…

- - - - A mathematically based function that
        encrypts/decrypts data
    - - piece of information that is used by the encryption algorithm to make the encryption or decryption process unique.
      - Similar to passwords, a user needs to provide the correct key to access or decrypt a message. The wrong key will decipher the message into an unreadable form.
    - - A predetermined length for the key.
        
        The longer the key, the more difficult it is to compromise in a brute force attack.
  - - - uses a secret key to encrypt the plaintext to the ciphertext and the same key to decrypt the ciphertext to the corresponding plaintext
      - Advantages
        
        keys are much shorter and can be easily remembered.
        
        symmetric key cryptosystems are generally less complicated and, therefore, use less processing power than asymmetric schemes.
        
        ideally suited for bulk
        data encryption.
      - disadvantage
        
        cannot be used to sign electronic documents or messages due to the fact that the mechanism is based on a shared secret by at least two parties.
        
        key distribution, particularly in ecommerce environments where customers are unknown, untrusted entities.
  - - - is also known to easily break the security of schemes
        like RSA
- - - - session-or connectionlayered protocol widely used for communication between browsers and web servers.
      - Besides communication privacy, it also provides endpoint
        authentication.
      - allow client-server applications to communicate in a way designed to prevent eavesdropping, tampering and message forgery.
      - TLS involves a few basic phases:
        
        • Peer negotiation for algorithm support
        
        • Public-key, encryption-based key exchange and certificate-based authentication
        
        • Symmetric cipher-based traffic encryption
- - - - . To prevent this kind of attack (known as replay attack), a signed time stamping or a counter may be attached to the document.