SYO-601 Encryption/Hashing

Type: Asymmetric encryption.

Use Cases: Secure data transmission, digital signatures.

Advanced Encryption Standard

Type: Symmetric encryption.

Use Cases: Data encryption, VPNs, secure communications.

Data Encryption Standard

Type: Symmetric encryption.

Status: Deprecated due to vulnerabilities.

Triple DES

Type: Symmetric encryption.

Status: Deprecated, recommended to transition to AES.

A type of cryptographic system that uses a pair of keys for encryption and decryption: a public key and a private key.

Public key is used to encrypt data, private key is used to decrypt it.

Allows secure communication between parties without the need to share a secret key in advance.

Public Key: Can be shared openly and is used for encrypting data.

Private Key: Kept secret and used for decrypting data.

Example Algorithms: RSA, ECC (Elliptic Curve Cryptography).

A type of cryptographic system that uses the same key for both encryption and decryption.

The key must be kept secret and shared only with authorized parties.

Single Key: Used for both encrypting and decrypting data.

Key Sharing: The key must be securely shared between the communicating parties.

Example Algorithms: AES (Advanced Encryption Standard), DES (Data Encryption Standard), 3DES (Triple DES).

Elliptic Curve Cryptography

Type: Asymmetric encryption.

Low processing power requirements

Suitable for small wireless devices

Advantages: High security with smaller key sizes.

Produces a 128-bit hash value.

It is considered broken and unsuitable for further use.

Secure Hash Algorithm

SHA-1 produces a 160-bit hash value (deprecated due to vulnerabilities).

SHA-2 and SHA-3 are more secure and widely used, with SHA-256 being common in many applications.

Diffie-Hellman: Allows two parties to securely share a symmetric key over a public channel.

ECDH (Elliptic Curve Diffie-Hellman): An elliptic curve variant of Diffie-Hellman, providing stronger security with smaller keys.

Definition: Methods for securely distributing cryptographic keys to parties.

Methods: Pre-shared keys, Public Key Infrastructure (PKI), Key Distribution Centers (KDC).

MD5: Produces a 128-bit hash value, deprecated due to vulnerabilities.

SHA-1: Produces a 160-bit hash value, deprecated due to vulnerabilities.

SHA-2: Produces hash values of various sizes (256-bit, 512-bit, etc.), widely used.

SHA-3: A newer family of secure hash algorithms.

Electronic Codebook

Basic mode, not recommended due to lack of diffusion.

Cipher Block Chaining

Requires an initialization vector (IV), more secure than ECB.

Galoi/Counter Mode

Provides both confidentiality and integrity.

Definition: Used to verify the authenticity and integrity of a message.

Examples: RSA, DSA, ECDSA.

Public Key Infrastructure

Components: Certificates (X.509), Certificate Authorities (CAs).

Purpose: Secure key exchange and authentication.

Secure Socket Layer (deprecated) Transport Layer Security (we still often call it SSL).

Definition: Protocols for securing internet communication.

Uses: HTTPS for secure web browsing.

Pretty Good Privacy

Encrypts emails and files, uses both symmetric and asymmetric encryption.

Secure/Multipurpose Internet Mail Extensions

Uses certificates for secure email communication.

Tools: BitLocker (Windows).

FileVault (Mac).

LUKS [Linux Unified Key Setup] (Linux).

Purpose: Full disk encryption to protect data at rest.

This is the key exchange protocol used in WPA3 that replaces WPA2-PSK's Pre-Shared Key mechanism with a more secure method.

Counter Mode with Cipher Block Chaining Message Authentication Code Protocol.

This is the encryption protocol used in WPA2 and WPA3 for securing data integrity and confidentiality.

New Technology LAN Manager

A suite of protocols that provides new functionality to Windows for CIA.

Also known as the NT LAN Manager hash.

Provides unicode support and uses RC4 cipher.

Replaced LANMAN.

Windows will try kerberos first, then fall back to NTLM or NLTM2.

Perfect Forward Secrecy ensures that session keys used in encrypted communications are not compromised even if the long-term private keys of the server are compromised.

a solution designed to strengthen the security of session keys