UNIT5 Cryptography 1 Principles Of Cryptography 2 Cryptography
![UNIT-5 Cryptography 1. Principles Of Cryptography 2. Cryptography Definition 3. Cipher Methods 4. Encrption UNIT-5 Cryptography 1. Principles Of Cryptography 2. Cryptography Definition 3. Cipher Methods 4. Encrption](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-1.jpg)
![1. Principles of Cryptography § Encryption: the process of converting an original message into 1. Principles of Cryptography § Encryption: the process of converting an original message into](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-2.jpg)
![2. Encryption Definitions § Algorithm: the mathematical formula or method used to convert an 2. Encryption Definitions § Algorithm: the mathematical formula or method used to convert an](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-3.jpg)
![Contd… § Decipher: to decrypt or convert ciphertext to plaintext § Encipher: to encrypt Contd… § Decipher: to decrypt or convert ciphertext to plaintext § Encipher: to encrypt](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-4.jpg)
![Contd… § Plaintext: the original unencrypted message that is encrypted and results from successful Contd… § Plaintext: the original unencrypted message that is encrypted and results from successful](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-5.jpg)
![Contd… M represents original message; C represents ciphertext; E represents encryption process; D represents Contd… M represents original message; C represents ciphertext; E represents encryption process; D represents](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-6.jpg)
![2. Cipher Methods § Plaintext can be encrypted through bit stream or block cipher 2. Cipher Methods § Plaintext can be encrypted through bit stream or block cipher](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-7.jpg)
![Contd… § Cryptosystems typically made up of algorithms, data handling techniques, and procedures § Contd… § Cryptosystems typically made up of algorithms, data handling techniques, and procedures §](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-8.jpg)
![Principles of Information Security, 3 rd edition 9 Principles of Information Security, 3 rd edition 9](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-9.jpg)
![2. 1 Deciphering using the Vigenere Square § Using the VS, decipher the following 2. 1 Deciphering using the Vigenere Square § Using the VS, decipher the following](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-10.jpg)
![Contd… § Transposition cipher: rearranges values within a block to create ciphertext § Exclusive Contd… § Transposition cipher: rearranges values within a block to create ciphertext § Exclusive](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-11.jpg)
![Table 8 -1 Exclusive OR Operations Perform an XOR cipher on the following bits. Table 8 -1 Exclusive OR Operations Perform an XOR cipher on the following bits.](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-12.jpg)
![§ 01100001 = a § 01100010 = b § 01100011 = c § Message § 01100001 = a § 01100010 = b § 01100011 = c § Message](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-13.jpg)
![2. 2 Hash Functions § Mathematical algorithms that generate message summary/digest to confirm message 2. 2 Hash Functions § Mathematical algorithms that generate message summary/digest to confirm message](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-14.jpg)
![3. Cryptographic Algorithms § Often grouped into two broad categories, symmetric and asymmetric; today’s 3. Cryptographic Algorithms § Often grouped into two broad categories, symmetric and asymmetric; today’s](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-15.jpg)
![Contd… § Symmetric encryption: uses same “secret key” to encipher and decipher message § Contd… § Symmetric encryption: uses same “secret key” to encipher and decipher message §](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-16.jpg)
![Figure 8 -3 Symmetric Encryption Example Principles of Information Security, 3 rd edition 17 Figure 8 -3 Symmetric Encryption Example Principles of Information Security, 3 rd edition 17](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-17.jpg)
![Contd… § Data Encryption Standard (DES): one of most popular symmetric encryption cryptosystems § Contd… § Data Encryption Standard (DES): one of most popular symmetric encryption cryptosystems §](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-18.jpg)
![Contd… § Asymmetric encryption (public-key encryption) § Uses two different but related keys; either Contd… § Asymmetric encryption (public-key encryption) § Uses two different but related keys; either](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-19.jpg)
![Figure 8 -4 Using Public Keys Principles of Information Security, 3 rd edition 20 Figure 8 -4 Using Public Keys Principles of Information Security, 3 rd edition 20](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-20.jpg)
![3. 1 Encryption Key Size § When using ciphers, size of cryptovariable or key 3. 1 Encryption Key Size § When using ciphers, size of cryptovariable or key](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-21.jpg)
![Principles of Information Security, 3 rd edition 22 Principles of Information Security, 3 rd edition 22](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-22.jpg)
![4. Public Key Infrastructure § Public Key Infrastructure (PKI): integrated system of software, encryption 4. Public Key Infrastructure § Public Key Infrastructure (PKI): integrated system of software, encryption](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-23.jpg)
![Contd… § PKI protects information assets in several ways: § Authentication § Integrity § Contd… § PKI protects information assets in several ways: § Authentication § Integrity §](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-24.jpg)
![4. 1 Digital Signatures § Encrypted messages that can be mathematically proven to be 4. 1 Digital Signatures § Encrypted messages that can be mathematically proven to be](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-25.jpg)
![4. 2 Digital Certificates § Electronic document containing key value and identifying information about 4. 2 Digital Certificates § Electronic document containing key value and identifying information about](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-26.jpg)
![Figure 8 -5 Digital Signatures Principles of Information Security, 3 rd edition 27 Figure 8 -5 Digital Signatures Principles of Information Security, 3 rd edition 27](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-27.jpg)
![Principles of Information Security, 3 rd edition 28 Principles of Information Security, 3 rd edition 28](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-28.jpg)
![4. 3 Hybrid Cryptography Systems § Except with digital certificates, pure asymmetric key encryption 4. 3 Hybrid Cryptography Systems § Except with digital certificates, pure asymmetric key encryption](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-29.jpg)
![Figure 8 -7 Hybrid Encryption Example Principles of Information Security, 3 rd edition 30 Figure 8 -7 Hybrid Encryption Example Principles of Information Security, 3 rd edition 30](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-30.jpg)
![4. 4 Steganography § Process of hiding information; in use for a long time 4. 4 Steganography § Process of hiding information; in use for a long time](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-31.jpg)
![5. Attacks on Cryptosystems § Attempts to gain unauthorized access to secure communications have 5. Attacks on Cryptosystems § Attempts to gain unauthorized access to secure communications have](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-32.jpg)
![5. 1 Man-in-the-Middle Attack § Designed to intercept transmission of public key or insert 5. 1 Man-in-the-Middle Attack § Designed to intercept transmission of public key or insert](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-33.jpg)
![5. 2 Correlation Attacks § Collection of brute-force methods that attempt to deduce statistical 5. 2 Correlation Attacks § Collection of brute-force methods that attempt to deduce statistical](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-34.jpg)
![5. 3 Timing Attacks § Attacker eavesdrops during victim’s session; uses statistical analysis of 5. 3 Timing Attacks § Attacker eavesdrops during victim’s session; uses statistical analysis of](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-35.jpg)
![5. 4 Defending Against Attacks § No matter how sophisticated encryption and cryptosystems have 5. 4 Defending Against Attacks § No matter how sophisticated encryption and cryptosystems have](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-36.jpg)
- Slides: 36
![UNIT5 Cryptography 1 Principles Of Cryptography 2 Cryptography Definition 3 Cipher Methods 4 Encrption UNIT-5 Cryptography 1. Principles Of Cryptography 2. Cryptography Definition 3. Cipher Methods 4. Encrption](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-1.jpg)
UNIT-5 Cryptography 1. Principles Of Cryptography 2. Cryptography Definition 3. Cipher Methods 4. Encrption Algorithms 5. Public Key Infrastructure 6. Attacks on Cryptosystems Firewalls & Network Security, 2 nd ed. - Chapter 9 1
![1 Principles of Cryptography Encryption the process of converting an original message into 1. Principles of Cryptography § Encryption: the process of converting an original message into](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-2.jpg)
1. Principles of Cryptography § Encryption: the process of converting an original message into a form that cannot be understood by unauthorized individuals § Cryptology, the science of encryption, encompasses two disciplines: § Cryptography: describes the processes involved in encoding and decoding messages so that others cannot understand them § Cryptanalysis: the process of deciphering the original message (plaintext) from an encrypted message (ciphertext) without knowing the algorithms and keys used to perform the encryption Firewalls & Network Security, 2 nd ed. - Chapter 9 2
![2 Encryption Definitions Algorithm the mathematical formula or method used to convert an 2. Encryption Definitions § Algorithm: the mathematical formula or method used to convert an](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-3.jpg)
2. Encryption Definitions § Algorithm: the mathematical formula or method used to convert an unencrypted message into an encrypted message § Cipher: the transformation of the individual components (characters, bytes, or bits) of an unencrypted message into encrypted components § Ciphertext or cryptogram: the unintelligible encoded message resulting from an encryption § Cryptosystem: the set of transformations necessary to convert an unencrypted message into an encrypted message Firewalls & Network Security, 2 nd ed. - Chapter 9 3
![Contd Decipher to decrypt or convert ciphertext to plaintext Encipher to encrypt Contd… § Decipher: to decrypt or convert ciphertext to plaintext § Encipher: to encrypt](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-4.jpg)
Contd… § Decipher: to decrypt or convert ciphertext to plaintext § Encipher: to encrypt or convert plaintext to ciphertext § Key or cryptovariable: the information used in conjunction with the algorithm to create the ciphertext from the plaintext; it can be a series of bits used in a mathematical algorithm or the knowledge of how to manipulate the plaintext § Keyspace: the entire range of values that can possibly be used to construct an individual key Firewalls & Network Security, 2 nd ed. - Chapter 9 4
![Contd Plaintext the original unencrypted message that is encrypted and results from successful Contd… § Plaintext: the original unencrypted message that is encrypted and results from successful](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-5.jpg)
Contd… § Plaintext: the original unencrypted message that is encrypted and results from successful decryption § Steganography: the process of hiding messages, usually within graphic images § Work factor: the amount of effort (usually expressed in units of time) required to perform cryptanalysis on an encoded message Firewalls & Network Security, 2 nd ed. - Chapter 9 5
![Contd M represents original message C represents ciphertext E represents encryption process D represents Contd… M represents original message; C represents ciphertext; E represents encryption process; D represents](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-6.jpg)
Contd… M represents original message; C represents ciphertext; E represents encryption process; D represents the decryption process; K represents a key So… E(M) = C encrypting a message results in cyphertext D(C) = M and D[E(M)] = M E(M, K) = C specifies encrypting the message with a key; keys can be annotated K 1, K 2, etc. in the case of multiple keys Firewalls & Network Security, 2 nd ed. - Chapter 9 Slide 6
![2 Cipher Methods Plaintext can be encrypted through bit stream or block cipher 2. Cipher Methods § Plaintext can be encrypted through bit stream or block cipher](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-7.jpg)
2. Cipher Methods § Plaintext can be encrypted through bit stream or block cipher method § Bit stream: each plaintext bit transformed into cipher bit one bit at a time § Block cipher: message divided into blocks (e. g. , sets of 8 - or 16 -bit blocks) and each is transformed into encrypted block of cipher bits using algorithm and key Principles of Information Security, 3 rd edition 7
![Contd Cryptosystems typically made up of algorithms data handling techniques and procedures Contd… § Cryptosystems typically made up of algorithms, data handling techniques, and procedures §](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-8.jpg)
Contd… § Cryptosystems typically made up of algorithms, data handling techniques, and procedures § Substitution cipher: substitute one value for another § Monoalphabetic substitution: uses only one alphabet § Polyalphabetic substitution: more advanced; uses two or more alphabets § Vigenère cipher: advanced cipher type that uses simple polyalphabetic code; made up of 26 distinct cipher alphabets Principles of Information Security, 3 rd edition 8
![Principles of Information Security 3 rd edition 9 Principles of Information Security, 3 rd edition 9](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-9.jpg)
Principles of Information Security, 3 rd edition 9
![2 1 Deciphering using the Vigenere Square Using the VS decipher the following 2. 1 Deciphering using the Vigenere Square § Using the VS, decipher the following](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-10.jpg)
2. 1 Deciphering using the Vigenere Square § Using the VS, decipher the following message: HQ UEDY Hint: Use the most basic approach presented in the text. Q: Is the VS cipher monoalphabetic or polyalphabetic? Q: VS is an example of a ________ cipher. § Transposition Cipher Create cyphertext for the message “Accountants”, using a transposition cipher based a four letter displacement. Principles of Information Security, 3 rd edition 10
![Contd Transposition cipher rearranges values within a block to create ciphertext Exclusive Contd… § Transposition cipher: rearranges values within a block to create ciphertext § Exclusive](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-11.jpg)
Contd… § Transposition cipher: rearranges values within a block to create ciphertext § Exclusive OR (XOR): function of Boolean algebra; two bits are compared § If two bits are identical, result is binary 0 § If two bits not identical, result is binary 1 Principles of Information Security, 3 rd edition 11
![Table 8 1 Exclusive OR Operations Perform an XOR cipher on the following bits Table 8 -1 Exclusive OR Operations Perform an XOR cipher on the following bits.](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-12.jpg)
Table 8 -1 Exclusive OR Operations Perform an XOR cipher on the following bits. Message Cypher Key 01100001 01100010 01100011 01111111 Principles of Information Security, 3 rd edition 12
![01100001 a 01100010 b 01100011 c Message § 01100001 = a § 01100010 = b § 01100011 = c § Message](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-13.jpg)
§ 01100001 = a § 01100010 = b § 01100011 = c § Message § Key § Cypher text 01100001 01100010 01100011 01111111 00011110 00011101 00011100 Principles of Information Security, 3 rd edition 13
![2 2 Hash Functions Mathematical algorithms that generate message summarydigest to confirm message 2. 2 Hash Functions § Mathematical algorithms that generate message summary/digest to confirm message](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-14.jpg)
2. 2 Hash Functions § Mathematical algorithms that generate message summary/digest to confirm message identity and confirm no content has changed § Hash algorithms: publicly known functions that create hash value § Use of keys not required; message authentication code (MAC), however, may be attached to a message § Used in password verification systems to confirm identity of user Principles of Information Security, 3 rd edition 14
![3 Cryptographic Algorithms Often grouped into two broad categories symmetric and asymmetric todays 3. Cryptographic Algorithms § Often grouped into two broad categories, symmetric and asymmetric; today’s](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-15.jpg)
3. Cryptographic Algorithms § Often grouped into two broad categories, symmetric and asymmetric; today’s popular cryptosystems use hybrid combination of symmetric and asymmetric algorithms § Symmetric and asymmetric algorithms distinguished by types of keys used for encryption and decryption operations Principles of Information Security, 3 rd edition 15
![Contd Symmetric encryption uses same secret key to encipher and decipher message Contd… § Symmetric encryption: uses same “secret key” to encipher and decipher message §](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-16.jpg)
Contd… § Symmetric encryption: uses same “secret key” to encipher and decipher message § Encryption methods can be extremely efficient, requiring minimal processing § Both sender and receiver must possess encryption key § If either copy of key is compromised, an intermediate can decrypt and read messages Principles of Information Security, 3 rd edition 16
![Figure 8 3 Symmetric Encryption Example Principles of Information Security 3 rd edition 17 Figure 8 -3 Symmetric Encryption Example Principles of Information Security, 3 rd edition 17](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-17.jpg)
Figure 8 -3 Symmetric Encryption Example Principles of Information Security, 3 rd edition 17
![Contd Data Encryption Standard DES one of most popular symmetric encryption cryptosystems Contd… § Data Encryption Standard (DES): one of most popular symmetric encryption cryptosystems §](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-18.jpg)
Contd… § Data Encryption Standard (DES): one of most popular symmetric encryption cryptosystems § 64 -bit block size; 56 -bit key § Adopted by NIST in 1976 as federal standard for encrypting non-classified information § Triple DES (3 DES): created to provide security far beyond DES § Advanced Encryption Standard (AES): developed to replace both DES and 3 DES Principles of Information Security, 3 rd edition 18
![Contd Asymmetric encryption publickey encryption Uses two different but related keys either Contd… § Asymmetric encryption (public-key encryption) § Uses two different but related keys; either](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-19.jpg)
Contd… § Asymmetric encryption (public-key encryption) § Uses two different but related keys; either key can encrypt or decrypt message § If Key A encrypts message, only Key B can decrypt § Highest value when one key serves as private key and the other serves as public key Principles of Information Security, 3 rd edition 19
![Figure 8 4 Using Public Keys Principles of Information Security 3 rd edition 20 Figure 8 -4 Using Public Keys Principles of Information Security, 3 rd edition 20](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-20.jpg)
Figure 8 -4 Using Public Keys Principles of Information Security, 3 rd edition 20
![3 1 Encryption Key Size When using ciphers size of cryptovariable or key 3. 1 Encryption Key Size § When using ciphers, size of cryptovariable or key](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-21.jpg)
3. 1 Encryption Key Size § When using ciphers, size of cryptovariable or key is very important § Strength of many encryption applications and cryptosystems measured by key size § For cryptosystems, security of encrypted data is not dependent on keeping encrypting algorithm secret § Cryptosystem security depends on keeping some or all of elements of cryptovariable(s) or key(s) secret Principles of Information Security, 3 rd edition 21
![Principles of Information Security 3 rd edition 22 Principles of Information Security, 3 rd edition 22](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-22.jpg)
Principles of Information Security, 3 rd edition 22
![4 Public Key Infrastructure Public Key Infrastructure PKI integrated system of software encryption 4. Public Key Infrastructure § Public Key Infrastructure (PKI): integrated system of software, encryption](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-23.jpg)
4. Public Key Infrastructure § Public Key Infrastructure (PKI): integrated system of software, encryption methodologies, protocols, legal agreements, and third-party services enabling users to communicate securely § PKI systems based on public-key cryptosystems; include digital certificates and certificate authorities (CAs) Principles of Information Security, 3 rd edition 23
![Contd PKI protects information assets in several ways Authentication Integrity Contd… § PKI protects information assets in several ways: § Authentication § Integrity §](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-24.jpg)
Contd… § PKI protects information assets in several ways: § Authentication § Integrity § Privacy § Authorization § Nonrepudiation Principles of Information Security, 3 rd edition 24
![4 1 Digital Signatures Encrypted messages that can be mathematically proven to be 4. 1 Digital Signatures § Encrypted messages that can be mathematically proven to be](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-25.jpg)
4. 1 Digital Signatures § Encrypted messages that can be mathematically proven to be authentic § Created in response to rising need to verify information transferred using electronic systems § Asymmetric encryption processes used to create digital signatures Principles of Information Security, 3 rd edition 25
![4 2 Digital Certificates Electronic document containing key value and identifying information about 4. 2 Digital Certificates § Electronic document containing key value and identifying information about](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-26.jpg)
4. 2 Digital Certificates § Electronic document containing key value and identifying information about entity that controls key § Digital signature attached to certificate’s container file to certify file is from entity it claims to be from Principles of Information Security, 3 rd edition 26
![Figure 8 5 Digital Signatures Principles of Information Security 3 rd edition 27 Figure 8 -5 Digital Signatures Principles of Information Security, 3 rd edition 27](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-27.jpg)
Figure 8 -5 Digital Signatures Principles of Information Security, 3 rd edition 27
![Principles of Information Security 3 rd edition 28 Principles of Information Security, 3 rd edition 28](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-28.jpg)
Principles of Information Security, 3 rd edition 28
![4 3 Hybrid Cryptography Systems Except with digital certificates pure asymmetric key encryption 4. 3 Hybrid Cryptography Systems § Except with digital certificates, pure asymmetric key encryption](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-29.jpg)
4. 3 Hybrid Cryptography Systems § Except with digital certificates, pure asymmetric key encryption not widely used § Asymmetric encryption more often used with symmetric key encryption, creating hybrid system § Diffie-Hellman Key Exchange method: most common hybrid system; provided foundation for subsequent developments in public-key encryption Principles of Information Security, 3 rd edition 29
![Figure 8 7 Hybrid Encryption Example Principles of Information Security 3 rd edition 30 Figure 8 -7 Hybrid Encryption Example Principles of Information Security, 3 rd edition 30](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-30.jpg)
Figure 8 -7 Hybrid Encryption Example Principles of Information Security, 3 rd edition 30
![4 4 Steganography Process of hiding information in use for a long time 4. 4 Steganography § Process of hiding information; in use for a long time](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-31.jpg)
4. 4 Steganography § Process of hiding information; in use for a long time § Most popular modern version hides information within files appearing to contain digital pictures or other images § Some applications hide messages in. bmp, . wav, . mp 3, and. au files, as well as in unused space on CDs and DVDs Principles of Information Security, 3 rd edition 31
![5 Attacks on Cryptosystems Attempts to gain unauthorized access to secure communications have 5. Attacks on Cryptosystems § Attempts to gain unauthorized access to secure communications have](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-32.jpg)
5. Attacks on Cryptosystems § Attempts to gain unauthorized access to secure communications have typically used brute force attacks (ciphertext attacks) § Attacker may alternatively conduct known-plaintext attack or selected-plaintext attach schemes 32
![5 1 ManintheMiddle Attack Designed to intercept transmission of public key or insert 5. 1 Man-in-the-Middle Attack § Designed to intercept transmission of public key or insert](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-33.jpg)
5. 1 Man-in-the-Middle Attack § Designed to intercept transmission of public key or insert known key structure in place of requested public key § From victim’s perspective, encrypted communication appears to be occurring normally, but in fact attacker receives each encrypted message, decodes, encrypts, and sends to originally intended recipient § Establishment of public keys with digital signatures can prevent traditional man-in-the-middle attack 33
![5 2 Correlation Attacks Collection of bruteforce methods that attempt to deduce statistical 5. 2 Correlation Attacks § Collection of brute-force methods that attempt to deduce statistical](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-34.jpg)
5. 2 Correlation Attacks § Collection of brute-force methods that attempt to deduce statistical relationships between structure of unknown key and ciphertext § Differential and linear cryptanalysis have been used to mount successful attacks § Only defense is selection of strong cryptosystems, thorough key management, and strict adherence to best practices of cryptography in frequency of changing keys 34
![5 3 Timing Attacks Attacker eavesdrops during victims session uses statistical analysis of 5. 3 Timing Attacks § Attacker eavesdrops during victim’s session; uses statistical analysis of](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-35.jpg)
5. 3 Timing Attacks § Attacker eavesdrops during victim’s session; uses statistical analysis of user’s typing patterns and inter-keystroke timings to discern sensitive session information § Can be used to gain information about encryption key and possibly cryptosystem in use § Once encryption successfully broken, attacker may launch a replay attack (an attempt to resubmit recording of deciphered authentication to gain entry into secure source) 35
![5 4 Defending Against Attacks No matter how sophisticated encryption and cryptosystems have 5. 4 Defending Against Attacks § No matter how sophisticated encryption and cryptosystems have](https://slidetodoc.com/presentation_image/4998df8eb52beb577ed8a0323e299076/image-36.jpg)
5. 4 Defending Against Attacks § No matter how sophisticated encryption and cryptosystems have become, if key is discovered, message can be determined § Key management is not so much management of technology but rather management of people 36
Principles of public key cryptography
Public key cryptography principles
Authentication functions in cryptography
Introduction to cryptography
Modular arithmetic in cryptography and network security
Finite fields in cryptography
Terminologi kriptografi adalah
криптографический модуль
Davies meyer scheme
Cryptographic hash functions
What is cryptography
Des cryptography
Cryptography security services
Dan boneh stanford
Cryptography basics
Cryptography goals
Algebra and cryptography
Elliptic curve cryptography
Cramer shoup
Evolution of cryptography
Access control in cryptography
Three classes of intruders in network security
Elementary cryptography
Cryptography
Approaches to message authentication
Obfuscation cryptography
What are cryptography and cryptanalysis
Cryptographer adalah
Hill cipher decoder
Firewall in cryptography and network security
Interception interruption modification and fabrication
Euler's theorem in cryptography
Confusion and diffusion example
Pearson cryptography and network security
Introduction to cryptography
A murder has been committed
Hecker 101