Announcements: Class is cancelled Thurs+Fri while I’m at the SIGCSE conference Class is cancelled Thurs+Fri while I’m at the SIGCSE conference Assignment 1 is posted, due next Tuesday in class. Assignment 1 is posted, due next Tuesday in class. Use the time to familiarize yourself with the Matlab/Maple/Mathematica tools. Use the time to familiarize yourself with the Matlab/Maple/Mathematica tools. You should have subscribed to Angel forums You should have subscribed to Angel forumsQuestions? Roll Call Today: shift ciphers DTTF/NB479: DszquphsbqizDay 2

Sherlock Holmes, The Adventure of the Dancing Men (1898) Who got it? In a letter: 2 weeks later: 2 mornings later: 3 days later: 4 days later:

Comments A simple substitution cipher Used knowledge of linguistics The letter E. The letter E. Used domain knowledge: Elsie Issue with ____________: Sherlock masqueraded as Elsie. Sherlock masqueraded as Elsie. Others are confidentiality, integrity, non-repudiation. Others are confidentiality, integrity, non-repudiation. There is a problem with original source: One symbol is used twice (for V and P). One symbol is used twice (for V and P). Perhaps needs error-correcting? Perhaps needs error-correcting? Read Section 2.5 in T&W for the solution

Non-secure channels AliceBob Eve EncryptDecrypt Trappe and Washington, p. 3 Encryption Key (+1) Decryption Key (-1) plaintextCIPHERTEXT DSZQUPHSBQIZ cryptographycryptography

Shift ciphers Attributed to Julius Caesar Letters represented as x  x + k (mod 26) Relatively weak cryptosystem. Consider 4 typical attacks to find the decryption key: Ciphertext only (the discussion forums) Ciphertext only (the discussion forums) Known plaintext Known plaintext Chosen plaintext Chosen plaintext Chosen ciphertext Chosen ciphertext

1. Ciphertext only Consider dszquphsbqiz dszquphsbqizetarvqitcrjafubswrjudskbgvctxskvetlchwduytlwfumdixevzumxgvnejyfwavnyhwofkzgxbwozixpglahycxpajyqhmbizdyqbkzrincjaezrclasjodkbfasdmbtkpelcgbtenculqfmdhcufodvmrgneidvgpewnshofjewhqfxotipgkfxirgypujqhlgyjshzqvkrimhzktiarwlsjnialujbsxmtkojbmvkctynulpkcnwlduzovmqldoxmevapwnrmepynfwbqxosnfqzogxcryptography

2. Known plaintext Say I know sample of plaintext and corresponding ciphertext. How long does the sample need to be to find the key?

3. Chosen plaintext Say I have access to the encryption machine and can choose a sample of plaintext to encode. How can I deduce the key? Just encode a. 4. Chosen ciphertext Say I can choose a sample of ciphertext to decode. Just decode A; that gives decryption key; the encryption key is the negative.

Affine ciphers Somewhat stronger since scale, then shift: x   x +  (mod 26) Say y = 5x + 3; x = ‘hellothere’; Then y = ‘mxggv…’

Affine ciphers: x   x + b (mod 26) Consider the 4 attacks: 1. How many possibilities must we consider in brute force attack?

Restrictions on  Consider y= 2x, y = 4x, or y = 13x The problem is that gcd( , 26) ~= 1. The function has no inverse.

Finding the decryption key What’s the inverse of y = 5x + 3? Remember this is “Integer mod 26 World”.

Affine ciphers: x  ax + b (mod 26) Consider the 4 attacks: 1. Ciphertext only: How long is brute force? How long is brute force? 2. Known plaintext How many characters do we need? How many characters do we need? 3. Chosen plaintext Wow, this is easy. Wow, this is easy. 4. Chosen ciphertext Could be even easier! Could be even easier!

Assignment 1 Enjoy using the Maple/Matlab tools! Have fun reading the posts if you get stuck See you Monday!