Symmetric and asymmetric key
Download as PPTX, PDFâ˘26 likesâ˘32,916 views
Symmetric encryption uses a shared secret key between the sender and receiver to encrypt and decrypt messages. It is faster than asymmetric encryption but requires secure key exchange. Asymmetric encryption uses separate public and private keys, where the public key is used to encrypt and the private key decrypts, allowing secure communication without pre-shared keys. Common symmetric algorithms are AES and DES, while asymmetric algorithms include RSA, Diffie-Hellman, and ECDSA.
Symmetric and asymmetric key
- 1. Symmetric & Asymmetric encryption Š 2013, Triad Square InfoSec Pvt. Ltd
- 2. SYMMETRIC ENCRYPTION ď An encryption system in which the sender and receiver of a message share a single, common key that is used to encrypt and decrypt the message. ď In other terms, Data is encrypted and decrypted using the same key. ď Symmetric-key cryptography is sometimes called secretkey cryptography. Š 2013, Triad Square InfoSec Pvt. Ltd
- 3. SYMMETRIC ENCRYPTION (cont..) (Plain text) (Plain text) Hello world Hello world (cipher text) #%giuyrwkmns:{? Encryption Decryption Shared same secret key Š 2013, Triad Square InfoSec Pvt. Ltd
- 4. ď Symmetric-key systems are simpler and faster, but their main drawback is that the two parties must somehow exchange the key in a secure way. Public-key encryption avoids this problem because the public key can be distributed in a non-secure way, and the private key is never transmitted, Public-key encryption avoids this problem because the public key can be distributed in a non-secure way, and the private key is never transmitted. ď Examples of symmetric algorithms are DES, 3DES and AES Š 2013, Triad Square InfoSec Pvt. Ltd
- 5. ď The most popular symmetric-key system is the Data Encryption Standard (DES). ď DES uses 56-bit keys, they are short enough to be easily brute-forced by modern hardware and it is recommended that DES should not to be used. ď Triple DES (or 3DES) uses 128 bits key length, the same algorithm, applied three times to produce strong encryption. Š 2013, Triad Square InfoSec Pvt. Ltd
- 6. MERITS & DE-MERITS Merits: ďśSIMPLER ďśFASTER De-Merits: ďśTwo parties must somehow exchange the key in a secure way. ďśPublic key is distributed in a non-secure way b/n Client/Server. ďśEasy for hackers to get the key as it is shared in unsecure way. Š 2013, Triad Square InfoSec Pvt. Ltd
- 7. Asymmetric encryption: Asymmetric encryption use two keys, one to encrypt the data, and another key to decrypt the data. These keys are generated together. One is named as Public key and is distributed freely. The other is named as Private Key and it is kept hidden. Both Sender & Recipient has to share their Public Keys for Encryption and has to use their Private Keys for Decryption. Š 2013, Triad Square InfoSec Pvt. Ltd
- 8. How it WORKSâŚâŚ.? Š 2013, Triad Square InfoSec Pvt. Ltd
- 9. Key Points in Asymmetric Encryption ďś Asymmetric encryption use two keys: Public Key - to encrypt the data Private Key - to decrypt the data ďś These keys are generated together. ďś The Public key(s) is distributed freely between the sender and receiver. ďś The other is named as Private Key and it is kept hidden. ďś The Private Key is only used for Decryption and will not be shared between the sender and receiver. Š 2013, Triad Square InfoSec Pvt. Ltd
- 10. Asymmetric Encryption Algorithms ďśRSA: Rivest-Shamir-Adleman is the most commonly used asymmetric algorithm (public key algorithm). It can be used both for encryption and for digital signatures. ďśDigital Signature Algorithm: The standard defines DSS to use the SHA-1 hash function exclusively to compute message. The main problem with DSA is the fixed subgroup size (the order of the generator element), which limits the security to around only 80 bits. Hardware attacks can be menacing to some implementations of DSS. However, it is widely used and accepted as a good algorithm. ďśDiffie-Helman: Diffie-Hellman is the first asymmetric encryption algorithm, invented in 1976, using discrete logarithms in a finite field. Allows two users to exchange a secret key over an insecure medium without any prior secrets. Š 2013, Triad Square InfoSec Pvt. Ltd
- 11. Asymmetric Encryption Algorithms ďśElGamal: The ElGamal is a public key cipher - an asymmetric key encryption algorithm for public-key cryptography which is based on the Diffie-Hellman key agreement. ElGamal is the predecessor of DSA. ďśECDSA: Elliptic Curve DSA (ECDSA) is a variant of the Digital Signature Algorithm (DSA) which operates on elliptic curve groups. As with Elliptic Curve Cryptography in general, the bit size of the public key believed to be need ECDSA is about twice the size of the security level, in bits. ďśXTR: It is based on the primitive underlying the very first public key cryptosystem, the Diffie-Hellman key agreement protocol. Some advantages of XTR are its fast key generation (much faster than RSA), small key sizes (much smaller than RSA, comparable with ECC for current security settings), and speed. Š 2013, Triad Square InfoSec Pvt. Ltd
- 12. MERITS & DE-MERITS Merits: ďś Two parties don't need to have their private keys already shared in order to communicate using encryption. ďś Authentication and Non-Repudiation are possible. (Authentication means that you can encrypt the message with my public key and only I can decrypt it with my private key. Non-repudiation means that you can "sign" the message with your private key and I can verify that it came from you with your public key.) De-Merits: ďśAsymmetric Encryption algorithms are comparatively complex. ďśTime consuming process for Encryption and Decryption. Š 2013, Triad Square InfoSec Pvt. Ltd