Cybersecurity: Module 10

The field of science that encompasses cryptography and cryptanalysis.

The process of making and using codes to secure information.

The process of obtaining the plaintext message from a ciphertext message without knowing the keys used to perform the encryption.

The mathematical formula or method used to convert an unencrypted message into an encrypted message; sometimes refers to the programs that enable the cryptographic processes.

An encryption method that involves converting plaintext to ciphertext one bit at a time.

An encryption method that involves dividing the plaintext into blocks or sets of bits and then converting the plaintext to ciphertext one block at a time.

When used as a verb, the transformation of the individual components (characters, bytes, or bits) of an unencrypted message into encrypted components or vice versa

The unintelligible encrypted or encoded message resulting from an encryption.

The process of converting components (words or phrases) of an unencrypted message into encrypted components.

The process of converting an encoded or enciphered message (ciphertext) back to its original readable form (plaintext)

The process of converting an original message (plaintext) into a form that cannot be used by unauthorized individuals (ciphertext)

The information used in conjunction with the algorithm to create the ciphertext from the plaintext; it can be a series of bits used in an algorithm or the knowledge of how to manipulate the plaintext.

The entire range of values that can be used to construct an individual key.

A series of encryptions and decryptions between a number of systems, wherein each system in a network decrypts the message sent to it, re-encrypts the message using different keys, and sends it to the next neighbor.

The original unencrypted message that is encrypted and the message that results from successful decryption.

The process of hiding messages; for example, hiding a message within the digital encoding of a picture or graphic so that it is almost impossible to detect that the hidden message even exists.

The amount of effort (usually expressed in units of time) required to perform cryptanalysis on an encoded message.

An encryption method in which one value is substituted for another.

A substitution cipher that incorporates a single alphabet in the encryption process.

A substitution cipher that incorporates two or more alphabets in the encryption process.

An advanced type of substitution cipher that uses a simple polyalphabetic code.

A cryptographic operation that involves simply rearranging the values within a block based on an established pattern

A function within Boolean algebra used as an encryption function in which two bits are compared; identical bits result in a binary 0 while different bits result in a binary 1.

A cryptographic technique developed at AT&T and known as the “one-time pad,” this cipher uses a set of characters for encryption operations only once and then discards it.

Mathematical algorithms that generate a message summary or digest (sometimes called a fingerprint) to confirm the message’s identity and integrity.

Public functions that create a hash value, also known as a message digest, by converting variable-length messages into a single fixed-length value.

A value representing the application of a hash algorithm on a message that is transmitted with the message so it can be compared with the recipient’s locally calculated hash of the same message

A value representing the application of a hash algorithm on a message that is transmitted with the message so it can be compared with the recipient’s locally calculated hash of the same message

A key-dependent, one-way hash function that allows only specific recipients (symmetric key holders) to access the message digest.

A standard issued by the National Institute of Standards and Technology (NIST) that specifies secure algorithms, such as SHA-1, for computing a condensed representation of a message or data file.

A key that can be used in symmetric encryption both to encipher and decipher the message.

A cryptographic method in which the same algorithm and secret key are used both to encipher and decipher the message.

The current federal standard for the encryption of data, as specified by NIST; based on the Rijndael algorithm.

A cryptographic method that incorporates mathematical operations involving both a public key and a private key to encipher or decipher a message; either key can be used to encrypt a message, but the other key is required to decrypt it.

A cryptographic method that incorporates mathematical operations involving both a public key and a private key to encipher or decipher a message; either key can be used to encrypt a message, but the other key is required to decrypt it.

An integrated system of software, encryption methodologies, protocols, legal agreements, and third-party services that enables users to communicate securely through the use of digital certificates.

Public-key container files that allow PKI system components and end users to validate a public key and identify its owner.

In PKI, a third party that manages users’ digital certificates.

In PKI, a third party that operates under the trusted collaboration of the certificate authority and handles day-to-day certification functions.

In PKI, a published list of revoked or terminated digital certificates.

The process of reversing public-key encryption to verify that a message was sent by the user and thus cannot be refuted.

Encrypted message components that can be mathematically proven as authentic.

The NIST standard for digital signature algorithm usage by federal information systems; based on a variant of the ElGamal signature scheme.

A hybrid cryptosystem that facilitates exchanging private keys using public-key encryption.

Limited-use symmetric keys for temporary communications during an online session.

The process of hiding messages; for example, hiding a message within the digital encoding of a picture or graphic so that it is almost impossible to detect that the hidden message even exists.

A security protocol developed by Netscape to use public-key encryption to secure a channel over the Internet.

An extended version of Hypertext Transfer Protocol that provides for the encryption of protected Web pages transmitted via the Internet between a client and server.

A security protocol that builds on the encoding format of the Multipurpose Internet Mail Extensions (MIME) protocol and uses digital signatures based on public-key cryptosystems to secure e-mail.

A standard proposed by the IETF that uses 3DES symmetric key encryption and RSA for key exchanges and digital signatures.

A protocol developed by credit card companies to protect against electronic payment fraud.

The primary and dominant cryptographic authentication and encryption product of the IETF’s IP Protocol Security Working Group; provides application support for all uses within TCP/IP, including virtual private networks.

In IPSec, an encryption method in which only a packet’s IP data is encrypted, not the IP headers themselves; allows intermediate nodes to read the source and destination addresses.

In IPSec, an encryption method in which the entire IP packet is encrypted and inserted as the payload in another IP packet; requires other systems at the beginning and end of the tunnel to act as proxies to send and receive the encrypted packets and then transmit the packets to their ultimate destination.

In IPSec, a protocol that provides system-to-system authentication and data integrity verification but does not provide secrecy for the content of a network communication.

In IPSec, a protocol that provides secrecy for the contents of network communications as well as system-to-system authentication and data integrity verification.