Encryption
Transforming data to protect its confidentiality.
Learning Objectives
- Define encryption using Laudon and Traver's definition.
- Identify the two main purposes of encryption.
- List the four e-commerce security dimensions encryption provides.
- Describe substitution and transposition ciphers.
Explanation
Encryption turns readable plain text into unreadable cipher text using a key, so only the sender and receiver can read it. Its purposes are (a) to secure stored information and (b) to secure information transmission.
Encryption is the process of transforming plain text or data into cipher text that cannot be read by anyone other than the sender and the receiver. The purpose of encryption is (a) to secure stored information and (b) to secure information transmission. Encryption can provide four of the six key dimensions of e-commerce security: message integrity, nonrepudiation, authentication, and confidentiality.
This transformation of plain text to cipher text is accomplished by using a key or cipher — any method for transforming plain text to cipher text. Encryption has been practiced since the earliest forms of writing and commercial transactions. Ancient Egyptian and Phoenician commercial records were encrypted using substitution and transposition ciphers.
In a substitution cipher, every occurrence of a given letter is replaced systematically by another letter. For instance, using the cipher 'letter plus two' (replace every letter with a new letter two places forward), the word 'Hello' becomes 'JGNNQ.' In a transposition cipher, the ordering of the letters in each word is changed in some systematic way. Leonardo Da Vinci recorded his shop notes in reverse order, making them readable only with a mirror.
Modern encryption systems are digital: the ciphers or keys used to transform plain text into cipher text are digital strings. The strength of modern security protection is measured in terms of the length of the binary key used to encrypt the data. Modern systems use keys with 56, 128, 256, or 512 binary digits. With 512-bit keys, there are 2^512 possibilities to check — it is estimated that all the computers in the world would need to work for 10 years to break such a key by brute force. The two main families of modern encryption are symmetric key cryptography and public key (asymmetric) cryptography, examined in the following topics.
Key Points & Important Terms
Key Points
- •Encryption transforms plain text into cipher text using a key.
- •Two purposes: secure stored information and secure transmission.
- •Provides 4 of 6 e-commerce security dimensions: integrity, nonrepudiation, authentication, confidentiality.
- •Substitution ciphers replace letters; transposition ciphers reorder them.
- •Modern keys are 56, 128, 256, or 512 bits.
- •A 512-bit key would take all the world's computers ~10 years to break.
Important Terms
- Encryption
- The process of transforming plain text or data into cipher text that cannot be read by anyone other than the sender and the receiver.
- Cipher text
- Text that has been encrypted and cannot be read without the key.
- Key (cipher)
- Any method for transforming plain text to cipher text.
- Substitution cipher
- A cipher where every occurrence of a given letter is replaced systematically by another letter.
- Transposition cipher
- A cipher where the ordering of letters in a word is changed in some systematic way.