1originates from a specific MIME content transfer
encoding.
base64
2commonly used when there is a need to encode binary data
that needs to be stored and transferred over media that are designed
to deal with ASCII
base64
3converts the plain text in the format ASCII bytes
xor
4It is a special case of Caesar Cipher in which shift is always
rot13 algorithm
5an ancient trick where you just move every letter forward characters in the alphabet based on the key.
caesar cipher
6used during both the
encryption and decryption processes
symmetric key
7closely related to the disciplines of cryptology and cryptanalysis
cryptography
8means of altering data from a readable form to a
protected form and back to the readable form.
cryptography algorithms
9 a mathematical
formula designed specifically to obscure the value and content
of data.
cipher algorithm
10the data that needs to be protected.
plaintext
11the mathematical algorithm that takes
plaintext as the input and returns ciphertext
encryption algorithm
12the encrypted, or unreadable, version of the plaintext.
ciphertext
13the mathematical algorithm that takes ciphertext as the input and decodes it into plaintext
decryption algorithm
14the value known to the sender that is used to
compute the ciphertext for the given plaintext.
encryption key
15the value known to the receiver that is used to
decode the given ciphertext into plaintext.
decryption key
16sometimes referred to as
secret-key cryptography, uses the same key to encrypt and
decrypt data.
symmetrical-key cryptography
17one that uses the same key for
encryption and decryption.
symmetric cipher
18Encrypt a group of bits as a single entity, inserting the
plaintext to make it a block size multiple.
block cipher
19uses the same key to encrypt and decrypt a
message, so both the sender and the receiver must
know and use the same private key.
des
20a method of encrypting text in
which a cryptographic key and algorithm are applied to each
binary digit in a data stream, one bit at a time.
stream cipher
21employed for making uninformed cipher text
confusion
22employed for increasing the redundancy ofthe plain text over the foremost a part of the cipher text to create it obscure.
diffusion
23method in which a message is transformed to conceal its real meaning.
cipher
24encrypts a message by printing it in reverse order.
reverse cipher
25the process of translating plain text data into something that appears to be random and
meaningless
encryption
26the process of
converting ciphertext back to plaintext.
decryption
27a structure or scheme consisting of a set of algorithms that converts plaintext to ciphertext to encode or decode messages securely.
cryptosystem
28create a fixed
length of bits known as a block cipher with a secret key
symmetric-key encryption algorithms
29use a pair
of keys, a public key associated with the creator/sender for
encrypting messages
asymmetric-key encryption algorithms
30Defined by machine administrators who set policy for one computer
Machine Policy
31Defined by enterprise administrators who set policy for enterprise domains
Enterprise Policy
32Lowest administrable policy level
User Policy
33Defined by the runtime host for setting load-time policy. Cannot be administered
Application Domain Policy
34a set of assumptions about how attackers might interact with a cipher and what they can and can’t do
Attack Model
35is the operation that sends an input value to some function and gets the output in return, without exposing the details of that function.
query
36takes a plaintext and returns a corresponding ciphertext, without revealing the secret key.
encryption query
37the attacker only sees what goes in and out of the cipher.
black-box models
38observe ciphertexts and do know the associated plaintexts.
Known-plaintext attackers (KPA)
39observe ciphertexts but don’t know the associated plaintexts, and don’t know how the plaintexts were selected.
Ciphertext-only attackers (COA)
40can perform encryption queries for plaintexts of their choice and observe the resulting ciphertexts.
Chosen-plaintext attackers (CPA)
41more realistic than black-box models for applications.
Gray-Box Models
42 a family of attacks within gray-box models.
Side-channel attacks
43a family of attacks on cipher implementations that are more powerful than side-channel attacks, and more expensive because they require sophisticated equipment
Invasive attacks
44captures the intuition that ciphertexts shouldn’t leak any information about plaintexts as long as the key is secret.
semantic security
45an algorithm that returns random-looking bits given some secret value.
deterministic random bit generator
46data is encrypted before being sent and decrypted after being received
In-transit encryption
47Data is encrypted before being written to memory and decrypted before being read.
At-rest encryption
48considered to be unconditionally secure, sometimes called strong, if it cannot be broken, even with infinite computational resources
cryptographic system
49considered computationally secure if it cannot be broken with available resources, either current or future
algorithm
50amount of data needed as input to the attack
Data complexity
51The time needed to perform the attack. This is often called the work factor.
Processing complexity
52amount of memory needed to do the attack
Storage requirements
53encryption operation for which the plaintext input to be transformed is the ciphertext output of a previous encryption operation.
Superencipherment
54means the illegal effort of breaking into the back end of a system to get the username/password combination.
brute force
55technique of trying every possible decryption key
brute-force attack
56a symmetric-key block cipher, known as the Data Encryption Algorithm (DEA) by ANSI and the DEA-1 by ISO
Data Encryption Standard (DES)
57performed only once and happens before round 1
initial permutation
58allows one bit to affect two substitutions, the dependency of the output bits on the input bits spreads
avalanche effect
59is used to provide Confusion, as it is dependent on the unknown key.
- It is a key-less fixed substitution cipherIt is a key-less fixed transposition cipher, but provides diffusion
s-box
60It hides the relationship between the ciphertext and the key
confusion
61It is a key-less fixed transposition cipher, but provides diffusion
p-box permutation
62Used prevalently on the web, it allows for secure messages to be sent between parties without having to agree on, or share, a secret key.
public key encryption
63deals with authentication to match public keys to people with some level of security
public key infrastructure
64It should be possible for the receiver of a message to ascertain its origin; an intruder should not be able to masquerade as someone else.
authentication
65allow you to electronically sign documents using encryption.
digital signatures
66sender should not be able to falsely deny later that the sender sent a message
non-repudiation
67occurs when a criminal hacker inserts themselves between a device and a server to intercept communications that can then be read and/or altered.
mitm attack
68primarily used to encrypt the session key used for secret key encryption or the message's hash value
rsa
69a symmetric block cipher chosen by the U.S. government to protect classified information.
aes