Instructor: Dania Alomar Cryptography Instructor: Dania Alomar

Cryptology Cryptology Cryptography Cryptanalysis “The art and science of keeping message secure” Cryptanalysis “The art and science of breaking the code “

Cryptology Cryptography Cryptanalysis Cryptology The art and science of keeping message secure. Cryptography comes from Greek and it means hidden/secret (crypto) and writing (graphy) Cryptanalysis The art and science of breaking the code. Cryptology The branch of mathematics encompassing both cryptography and cryptanalysis. Its practitioners are Cryptologists

Encryption and Decryption The original message is called Plaintext. The process of disguising a message in such a way to hide its substance, is called Encryption. The encrypted message is called Ciphertext The Encryption is done using the specified key: C = EK(P) or E(K, P) Decryption It takes the ciphertext and the secret key and produces the original plaintext. C = EK(P) P C P = DK(C)

Algorithm and keys Cipher Key & Key Space A cryptographic algorithm for performing encryption or decryption . It is a mathematical function used for both encryption and decryption. Key & Key Space The key is a value independent of the plaintext and of the algorithm The security of modern cryptosystem is based on a Key: which could be one of any large values. The range of possible key values is called the Key Space. Both encryption and decryption depends upon the Key. The algorithm will produce a different output depending on the specific key being used at the time

Secret Key Cryptography Public Key Cryptography Types Of Cryptography Secret Key Cryptography Each two parties share the same key Problem: How to distribute keys. Public Key Cryptography Each individual has two keys: private key (not revealed to anyone) public key (make it known to everyone) Problem: How to authenticate Plaintext ciphertext encryption decryption Key Plaintext ciphertext encryption decryption Public key Private key

Cryptography Services Confidentiality Prevent unauthorized disclosure of information Integrity Prevent unauthorized modification of information Authentication To verify the identity of subject Non-repudiation Protect from deniability

Kerckhoffs Principle Basic assumption The algorithm is completely known to the attacker Only the key is secret Also known as Kerckhoffs Principle Crypto algorithms are not secret Why do we make this assumption? Secret algorithms never remain secret Better to find weaknesses beforehand

Cryptanalysis The objective of attacking an encryption system is to recover the key in use rather than simply to recover the plaintext of a single ciphertext. General approaches: cryptanalytic attack brute-force attack Cryptanalytic attacks rely on the nature of the algorithm plus perhaps some knowledge of the general characteristics of the plaintext or even some sample plaintext–ciphertext pairs

Brute-Force Attack Try every key to decipher the ciphertext. On average, need to try half of all possible keys Time needed proportional to size of key space

Cryptanalytic Attacks May be classified by how much information needed by the attacker: Ciphertext-only attack Known-plaintext attack Chosen-plaintext attack Chosen-ciphertext attack

Ciphertext-only attack Given: a ciphertext c Q: what is the plaintext m? An encryption scheme is completely insecure if it cannot resist ciphertext-only attacks.

Known-plaintext attack Is an attack where a cryptanalyst has access to a plaintext and the corresponding ciphertext and seeks to discover a correlation between the two. Given: (m1,c1), (m2,c2), …, (mk,ck) and a new ciphertext c. Q: what is the plaintext of c? Q: what is the secret key in use?

Chosen-plaintext attack Is an attack where a cryptanalyst can encrypt a plaintext of his choosing and study the resulting ciphertext. This is most common against asymmetric cryptography, where a cryptanalyst has access to a public key Given: (m1,c1), (m2,c2), …, (mk,ck), where m1, m2, …, mk are chosen by the adversary; and a new ciphertext c. Q: what is the plaintext of c, or what is the secret key?

Chosen-ciphertext attack Is an attack where a cryptanalyst chooses a ciphertext and attempts to find a matching plaintext. Given: (m1,c1), (m2,c2), …, (mk,ck), where c1, c2, …, ck are chosen by the adversary; and a new ciphertext c. Q: what is the plaintext of c, or what is the secret key?

Arithmetic modulo m The integer modulo m, denoted by Zm is the set of integers {0,1,2,..,m-1} where addition, subtraction and multiplication is performed modulo m.

Classical Ciphers Substitution cipher Replacing each element of the plaintext with another element. Transposition (or permutation) cipher Rearranging the order of the elements of the plaintext. Product cipher Using multiple stages of substitutions and transpositions

Substitution cipher Monoalphabetic cipher Polyalphabetic cipher Uses fixed substitution over the entire message. Polyalphabetic cipher Uses a number of substitutions at different times in the message, where a unit from the plaintext is mapped to one of several possibilities in the ciphertext and vice-versa.

Monoalphabetic Ciphers The ciphers for which, once a key is chosen, each alphabetic character is mapped to a unique alphabetic character. Examples of mono alphabetic ciphers include Caesar cipher, Simple Substitution Cipher and Affine cipher.

Caesar Cipher Invented by Julius Caesar . Each letter is replaced by the letter three positions (with wrap around) further down the alphabet. Plain: a b c d e f g h i j k l m n o p q r s t u v w x y z Cipher: D E F G H I J K L M N O P Q R S T U V W X Y Z A B C Example: ohio state  RKLR VWDWH Extension (Shift Cipher): Instead of 3 use any number K between 1 and 25. e.g., for K=1, HAL  IBM.

Caesar Cipher Mathematically, map letters to numbers: a, b, c, ..., x, y, z 0, 1, 2, ..., 23, 24, 25 Then the general Caesar cipher is: c = EK(p) = (p + k) mod 26 p = DK(c) = (c – k) mod 26 Cryptanalysis of Caesar Cipher Key space: {0, 1, ..., 25} Vulnerable to brute-force attacks.

Simple Substitution Cipher Shuffle the letters and map each plaintext letter to a different random ciphertext letter. Keys for the simple substitution cipher usually consist of 26 letters (compared to the caeser cipher's single number). An example key is: An example encryption using the above key: When generating keys it is popular to use a key word, e.g. 'zebra' to generate it, since it is much easier to remember a key word compared to a random jumble of 26 characters. Using the keyword 'zebra', the key would become: plain alphabet : abcdefghijklmnopqrstuvwxyz cipher alphabet: phqgiumeaylnofdxjkrcvstzwb plaintext : defend the east wall of the castle ciphertext: giuifg cei iprc tpnn du cei qprcni cipher alphabet: zebracdfghijklmnopqstuvwxy

Cryptanalysis of Simple Substitution Cipher Now we have a total of 26! = 4 x 1026 keys. With so many keys, it is secure against brute-force attacks. But not secure against some cryptanalytic attacks. Problem is language characteristics.

Language Statistics and Cryptanalysis Human languages are not random. Letters are not equally frequently used. In English, E is by far the most common letter, followed by T, R, N, I, O, A, S. Other letters like Z, J, K, Q, X are fairly rare. There are tables of single, double & triple letter frequencies for various languages

English Letter Frequencies

Cryptanalysis of Simple Substitution Cipher Given ciphertext: UZQSOVUOHXMOPVGPOZPEVSGZWSZOPFPESXUDBMETSXAIZ VUEPHZHMDZSHZOWSFPAPPDTSVPQUZWYMXUZUHSX EPYEPOPDZSZUFPOMBZWPFUPZHMDJUDTMOHMQ Count relative letter frequencies (see next page) Guess {P, Z} = {e, t} Of double letters, ZW has highest frequency, so guess ZW = th and hence ZWP = the Proceeding with trial and error finally get: it was disclosed yesterday that several informal but direct contacts have been made with political representatives of the viet cong in moscow

Cont. Letter frequencies in ciphertext

Polyalphabetic Ciphers The use of multiple substitution alphabets will mean that a plaintext letter can encrypt to different ciphertext letters, thus causing the letter frequency distribution to appear “flatter”. A cipher that uses multiple substitution alphabets is called a polyalphabetic substitution cipher. The Vigenere Cipher, Playfair and Hill Cipher are examples of polyalphabetic ciphers.

Vigenere Cipher

Playfair Cipher Invented by Charles Wheatstone in 1854, but named after his friend Baron Playfair who promoted the use of the cipher . The Playfair algorithm is based on the use of a 5 × 5 matrix of letters constructed using a keyword. Example using the key word “PLAYFAIR EXAMPLE” The matrix is constructed by filling in the letters of the keyword (minus duplicates) from left to right and from top to bottom, and then filling in the remainder of the matrix with the remaining letters in alphabetic order. The letters I and J count as one letter. (plain IJ will be Ix Ix) In the Playfair cipher, there is not a single translation of each letter of the alphabet; that is, you don’t just decide that every B will be turned into an F. Instead, of letters are translated into other pairs of letters

Cont. plaintext is encrypted two letters at a time if a pair is a repeated letter, insert filler like 'X’ so that balloon would be treated as ba lx lo on. if both letters fall in the same row, replace each with letter to right (wrapping back to start from end). For example, lx is encrypted as RM. if both letters fall in the same column, replace each with the letter below it (again wrapping to top from bottom). For example, ru is encrypted as CL. Otherwise, each plaintext letter in a pair is replaced by the letter that lies in its own row and the column occupied by the other plaintext letter. For example pd is encrypted as AB.

Cont. Encrypting the message "Hide the gold in the tree stump": Plain text: HI DE TH EG OL DI NT HE TR EX ES TU MP Cipher text: BM OD ZB XD NA BE KU DM UI XM MO UV IF Decrypt this message: DIKZSARLBN

Cryptanalysis of Playfair Cipher security much improved over monoalphabetic since have 26 x 26 = 676 digrams. would need a 676 entry frequency table to analyse (verses 26 for a monoalphabetic) and correspondingly more ciphertext was widely used for many years eg. by US & British military in WW1 it can be broken, it leaves much of the structure of the plaintext language intact. A few hundred letters of ciphertext are generally sufficient.

Transposition Ciphers Also called permutation ciphers. Shuffle the plaintext, without altering the actual letters used. Example: rail fence ,Row Transposition Ciphers

rail fence The simplest permutation technique, in which the plaintext is written down as a sequence of diagonals and then read off as a sequence of rows. Example, to encipher the message "defend the east wall“ with a rail fence of depth 2, we write the following: The encrypted message is : DFNTEATALEEDHESWL

rail fence For the plaintext we used, "defend the east wall", with a key of 3, we write the following: Note that at the end of the message we have inserted two "X“ (so that there are the same number of letters on the top row, as on the bottom row). Decryption: The decryption process for the Rail Fence Cipher involves reconstructing the diagonal grid used to encrypt the message.

Decrypt rail fence We start by making a grid with as many rows as the key is, and as many columns as the length of the ciphertext. For example, if you receive the ciphertext "TEKOOHRACIRMNREATANFTETYTGHH", encrypted with a key of 4.  From this we can now read the plaintext off following the diagonals to get "they are attacking from the north".

Row Transposition Ciphers Plaintext is written row by row in a rectangle. Ciphertext: write out the columns in an order specified by a key. Key: 3 4 2 1 5 6 7 Plaintext: Ciphertext: TTNAAPTMTSUOAODWCOIXKNLYPETZ

Decrypt Row Transposition Ciphers To decrypt a message we must know the number of columns. The number of rows is length of the message divided by the number of columns. Ciphertext: TTNAAPTMTSUOAODWCOIXKNLYPETZ Key: 3 4 2 1 5 6 7 Number of columns is 7 and length of message is 28=> 28/7= 4 rows. Divide cipher text into block of 4 , rearrange blocks based on key.

Reading “Cryptography and Network Security Principles and Practices”, Fourth Edition by William Stallings Part one, Chapter 2