Symmetric Ciphers

Classical Encryption Techniques

1
 Encryption Algorithms
Symmetric
o Key at the sender side is same as receiver side
o Key is called secret key
Asymmetric
o Sender and receiver have different keys, called
private keys
o Public key is derived from private key
o Public key is sent on the channel
o Hence secrecy of key is maintained

2
Simplified Model of Symmetric Encryption

3
Simplified Model of Symmetric Encryption

4
Simplified Model of Symmetric Encryption

5
Simplified Model of Symmetric Encryption

6
 Some Basic Terminology
Plaintext - original message
Ciphertext - enciphered message
Cipher - algorithm for transforming plaintext to
ciphertext
Secret key - information used to encrypt and decrypt
Encipher (encryption) - convert plaintext to ciphertext
Decipher (decryption) - recover plaintext from
ciphertext
Cryptography Area of encryption schemes
Cryptanalysis (code breaking) - Methods of
deciphering ciphertext without knowledge of key
Cryptology - Field of cryptography and cryptanalysis
7
Model of Symmetric Cryptosystem
Cryptanalyst X
K

X
Message X Encryption Decryption
Destination
source Algorithm Y=E(K,X) Algorithm

Secure
channel
K

Key
source

8
Model of Symmetric Cryptosystem
Cryptanalyst X
K

X
Message X Encryption Decryption
Destination
source Algorithm Y=E(K,X) Algorithm

Secure
channel
K

Key
source

9
Model of Symmetric Cryptosystem
Cryptanalyst X
K

X
Message X Encryption Decryption
Destination
source Algorithm Y=E(K,X) Algorithm

Secure
channel
K

Key
source

10
 Cryptanalysis
Try to recover key and or message
general approaches
cryptanalytic attack-
knowledge of algorithm
general characteristics of the plain text
sample plaintext-ciphertext pairs
brute-force attack-
every possible key on ciphertext to extract
plaintext
generally, half of all possible keys are required

11
 Brute Force Search
try every key
proportional to key size

Key Size (bits) Number of Alternative Time required at 1 Time required at 106
Keys decryption/s decryptions/s
32 232 = 4.3 109 231 s = 35.8 minutes 2.15 milliseconds
56 256 = 7.2 1016 255 s = 1142 years 10.01 hours
128 2128 = 3.4 1038 2127 s = 5.4 1024 years 5.4 1018 years

168 2168 = 3.7 1050 2167 s = 5.9 1036 years 5.9 1030 years

26 characters 26! = 4 1026 2 1026 s = 6.4 1012 years 6.4 106 years
(permutation)

On average, half of all possible keys must be tried to achieve success

12
 Brute Force Search
try every key
proportional to key size

Key Size (bits) Number of Alternative Time required at 1 Time required at 106
Keys decryption/s decryptions/s
32 232 = 4.3 109 231 s = 35.8 minutes 2.15 milliseconds
56 256 = 7.2 1016 255 s = 1142 years 10.01 hours
128 2128 = 3.4 1038 2127 s = 5.4 1024 years 5.4 1018 years

168 2168 = 3.7 1050 2167 s = 5.9 1036 years 5.9 1030 years

26 characters 26! = 4 1026 2 1026 s = 6.4 1012 years 6.4 106 years
(permutation)

On average, half of all possible keys must be tried to achieve success

13
 Brute Force Search
try every key
proportional to key size

Key Size (bits) Number of Alternative Time required at 1 Time required at 106
Keys decryption/s decryptions/s
32 232 = 4.3 109 231 s = 35.8 minutes 2.15 milliseconds
56 256 = 7.2 1016 255 s = 1142 years 10.01 hours
128 2128 = 3.4 1038 2127 s = 5.4 1024 years 5.4 1018 years

168 2168 = 3.7 1050 2167 s = 5.9 1036 years 5.9 1030 years

26 characters 26! = 4 1026 2 1026 s = 6.4 1012 years 6.4 106 years
(permutation)

On average, half of all possible keys must be tried to achieve success

14
 Symmetric Encryption

substitution
transposition
product

15
 Symmetric Encryption
Transposition cipher
o Arrangement of bits without changing the value
o For n bit cipher n! rearrangements are possible
o Required number of key bits = ceil(log2(n!))
o For n=3, n!=6 and key size is = 3
o For 6 possible transpositions we are using 3 bit key
o Therefore out of 8 possible keys only 6 are used
Substitution cipher
o Substitutes the bits with another bits
o Number of possible substitutions is 2n
o Number of possible substitution arrangements is 2n!
o Number of key bits = log2(2n!)
o For n=3, 2n! =40320 and key size is = 16
o Therefore out of 216=65536 possible keys only 40320 are used
o Lot of unused keys 16
 Substitution Ciphers

Letters of plaintext are replaced by other letters or

by numbers or symbols

If plaintext is viewed as a sequence of bits, then

substitution involves replacing plaintext bit patterns
with ciphertext bit patterns

17
Types of Substitution Cipher
o Caesar
o Playfair
o Hill
o Vigenere
o Vernam
o One-Time Pad

18
 Caesar Cipher
Replaces each letter by 3rd letter after the current letter
in sequence
Define transformation as:
Plaintext: a b c d e f g h i j k l m n o p q r s t u v w x y z
Ciphertext: D E F G H I J K L M N O P Q R S T U V W X Y Z A
BC
example:
Plain: caesar cipher
Cipher: FDHVDU FLSKHU

19
 Caesar Cipher
Mathematically each letter is given a number
a b c d e f g h i j k l m n o p q r s t u v w x y z

0 1 2 3 4 5 6 7 8 9 10 11 12 1 1 1 1 1 1 1 2 2 2 2 2 2
3 4 5 6 7 8 9 0 1 2 3 4 5

General Caesar cipher is

c = E(k, p) = (p + k) mod (26)
p = D(k, c) = (c k) mod (26)
Also called additive cipher
Example
Plaintext: Encrypt message
Key: 3, ignore spaces
Ciphertext: HQFUBSWPHVVDJH
20
 Additive Ciphers
a b c d e f g h i j k l m n o p q r s t u v w x y z

0 1 2 3 4 5 6 7 8 9 10 11 12 1 1 1 1 1 1 1 2 2 2 2 2 2
3 4 5 6 7 8 9 0 1 2 3 4 5

Key can be any number between 0 and 25

Plaintext: Home
Key : 6
Home = {7, 14, 12, 4}
(P + k) mod 26 = {7, 14, 12, 4} + 6
= {13, 20, 18, 10}
Ciphertext
= NUSK
21
 Cryptanalysis of additive Cipher

Not secure
Algorithm is known
26 possible ciphers

brute force search

eg. break ciphertext: GCUAVQDTGCM
o Key = 1
o plain text: FBTZUPCSFBL
o Key = 2
o Plaintext: EASYTOBREAK

22
 Multiplicative Ciphers
C= (P K) mod 26
P = (C K-1) mod 26
P= home, K = 7
C= (7x7)mod 26, (14x7)mod26, (12x7)mod26 ,
(4x7) mod26
= 23, 20, 6, 2
= XUGC

23
 Affine Cipher
C = ((P x k1) + k2 ) mod 26
P = ((C- k2) x k1-1 ) mod 26

24
 Affine Cipher

Additive, multiplicative and affine ciphers have

small key domains.
This is because each alphabet altered by a key of
length one
Hence key is 26 letters long
Therefore vulnerable to brute-force attack
To reduce vulnerability, shuffle plaintext using a key
of length 26

25
 Monoalphabetic substitution Cipher

Key table
a b c d e f g h i j k l m n o p q r s t u v w x y z

N O A T R B E C F U X D Q G Y L K H V I J M P Z S W

Example
Plain : wish
Cipher: PFVC
A total of 26! = 4 x 1026 possible keys for monoalphabetic
General Caesar has 26 possible keys
Therefore security of monoalphabetic is better than
additive cipher

26
Monoalphabetic Cipher Security
It is not completely secure
Statistical attack based on the frequency of characters
can be used
If cryptanalyst knows language, regularities in language
and nature of plain text
Then it is possible to predict plaintext
Each letter is encrypted to the same letter even if that
letter repeats in the plaintext
Ex: Therefore ICRHRBYHR
Frequency of e is 3 in plaintext and R is 3 in ciphertext
Monoalphabetic cipher does not change the frequency
of characters in ciphertext
Therefore vulnerable to statistical attack
27
English Letter Frequencies

28
 Language Redundancy and
Cryptanalysis

In English, e is the most common letter

followed by t, r, n, l, o, a, s
Other letters like Z,J,K,Q,X are fairly rare
Table double & triple letter frequencies for
various languages can also be used

29
Letter frequency for Cryptanalysis
a b c d e f g h i j k l m n o p q r s t u v w x y z

N O A T R B E C F U X D Q G Y L K H V I J M P Z S W

Ex: plaintext: considerthisexample

ciphertext: AYGVFTRHICFVRZNQLR
e occurs max (3) times in plaintext
R occurs max (3) times in ciphertext
Similarly number of occurrences for other letters is
same
Calculate letter frequencies for ciphertext
Compare frequencies against known values

30
 Example Cryptanalysis
given ciphertext:
UZQSOVUOHXMOPVGPOZPEVSGZWSZOPFPESXUDBMETSXAIZ
VUEPHZHMDZSHZOWSFPAPPDTSVPQUZWYMXUZUHSX
EPYEPOPDZSZUFPOMBZWPFUPZHMDJUDTMOHMQ
count relative letter frequencies
P & Z are e and t
ZW is th and hence ZWP is the
proceeding with trial and error finally get
it was disclosed yesterday that several informal but
direct contacts have been made with political
representatives of the viet cong in moscow

31
 Attacks on Additive Cipher
Ciphertext only
Apply Bruteforce method
Do a frequency count for letters like, e, t
Known plaintext
If one plaintext letter and corresponding
ciphertext then key can be deduced
Ex: t (=19) D(=3) then
k=(3-19) mod 26= -16=10
Chosen plaintext
ciphertext gives the key for the chosen plaintext
Chosen ciphertext
plaintext gives the key for the chosen ciphertext
Therefore large number of keys in a monoalphabetic
cipher do not provide security 32
 Playfair Cipher

Monoalphabetic cipher
Encrypt multiple (two) letters called digram at once
Provides better security

33
 Playfair Key Matrix
Keyword is MONARCHY

M O N A R
C H Y

34
 Playfair Key Matrix
Keyword is MONARCHY

M O N A R
C H Y B

35
 Playfair Key Matrix
Keyword is MONARCHY

M O N A R
C H Y B D

36
 Playfair Key Matrix
Keyword is MONARCHY

M O N A R
C H Y B D
E F G I/J K
L P Q S T
U V W X Z

Plaintext: unit
Ciphertext: WMKS

37
 Playfair Encryption
Plaintext is encrypted two letters at a time
If plaintext has odd number of characters then
add a filler, x at the end
If a pair has repeated letters, insert filler like 'X
symmetric sy mx me tr ic
Encryption
o If both letters fall in the same row, replace each
with letter to right (wrapping back to start from
end)
o if both letters fall in the same column, replace
each with the letter below it (wrapping to top
from bottom)
o otherwise each letter is replaced by the letter in
the same row and in the column of the other
letter of the pair
38
 Playfair Cipher
Keyword is MONARCHY
Plaintext is HOUSE

M O N A R
C H Y B D
E F G I/J K
L P Q S T
U V W X Z

Plaintext: HO US EX
Ciphertext: FH XL IU
39
 Playfair Cipher
Keyword: playfair
Key: playfir
Plaintext: meet at the school

P L A Y F
I R B C D
E G H K M
N O Q S T
U V W X Z

Plaintext: ME ET AT TH ES CH OX OL
Ciphertext: EG MN FQ QM KN BK SV VR
40
 Security of Playfair Cipher

Brute-force is very difficult

Ciphertext only attack is possible
Security is better than monoalphabetic
Key domain is 25!
Has 26 x 26 = 676 digrams
would need a 676 entry frequency table to
analyse (verses 26 for a monoalphabetic)
Frequency of digrams can be used to deduce
the key
Can be broken, given a few hundred letters

41
 Hill Cipher

p is plaintext matrix
c is ciphertext matrix
k is key matrix
c =p x k mod 26
p = c x k-1 mod 26

42
 Modulo Arithmetic, 26

(3+24)mod 26
= 27 mod 26=1
(14-20)mod 26
=(-6)mod26=20
If (a*b) mod 26=1 then a and b are
multiplicative inverse of each other
Multiplicative inverse: 3*9=27 mod 26=1
3 and 9 are multiplicative inverse of each
other
43
Multiplicative Inverse for Modulo 26

number Multiplicativ number Multiplicativ

e inverse e inverse
1 1
3

44
Multiplicative Inverse for Modulo 26

number Multiplicativ number Multiplicativ

e inverse e inverse
1 1
3 9

45
Multiplicative Inverse for Modulo 26

number Multiplicativ number Multiplicativ

e inverse e inverse
1 1
3 9
5
7
9
11

46
Multiplicative Inverse for Modulo 26

number Multiplicativ number Multiplicativ

e inverse e inverse
1 1
3 9
5 21
7
9
11

47
Multiplicative Inverse for Modulo 26

number Multiplicativ number Multiplicativ

e inverse e inverse
1 1
3 9
5 21
7 15
9
11

48
Multiplicative Inverse for Modulo 26

number Multiplicativ number Multiplicativ

e inverse e inverse
1 1
3 9
5 21
7 15
9 3
11 19

49
Multiplicative Inverse for Modulo 26

number Multiplicativ number Multiplicativ

e inverse e inverse
1 1 15 7
3 9 17 23
5 21 19 11
7 15 21 5
9 3 23 17
11 19

Not all the number have multiplicative inverses

50
 Hill Cipher
Each letter of plaintext is assigned a numerical
value, a=0, b=1, z=25

Key is n x n matrix, n<= length of plaintext

11 12 13
k = 21 22 23
31 32 33

p = {p1 p2 p3}, c = {c1 c2 c3}

51
 Hill Cipher

11 12 13
1 2 3 = (1 2 3 ) 21 22 23 mod 26
31 32 33
c1 = (k11p1 + k21p2 + k31p3) mod 26
c2 = (k12p1 + k22p2 + k32p3) mod 26
c3 = (k31p1 + k32p2 + k33p3) mod 26

c=p x k mod 26

52
 Example Hill Cipher
Plaintext: paymoremoney
= pay mor emo ney

17 17 5
K= 21 18 21
2 2 19

abcdefghij k l m n o p q r s t u v w x y z
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25

{pay} {15,0,24},

c=p k mod 26

53
 Ciphertext

17 17 5
= (15 0 24) 21 18 21 mod 26
2 2 19

c = (303 303 531) mod 26

= (17 17 11)
= RRL
paymoremoneyRRLMWBKASPDH

54
 Example Hill Cipher
Plaintext: abc

1 2 3
K= 4 5 6
11 9 8

abcdefghij k l m n o p q r s t u v w x y z
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25

{abc} {0,1,2},

c=p x k mod 26

55
 Ciphertext

1 2 3
= (0 1 2) 4 5 6 mod 26
11 9 8

c = (0 23 22) mod 26
= AXW

56
 Example Hill Cipher contd.

For decryption, c k-1 mod 26 = p

Hides multiple letter frequency

Larger matrix hides more frequency information

57
 Inverse of A mod 26
5 8
A=
17 3
5 8
det =(5x3)-(8x17)= -121 mod 26
17 3
=(-121)+(5x26)=9
(1/9) mod 26=3
3 17 T 3 8 9 24
A-1 mod 26=3 =3 =
8 5 17 5 51 15
9 2
=
1 15

58
 Determinant of Matrix
11 12
For A= 22 , det(A) = a11a22 a21a12
21

11 12 13
For A= 21 22 23
31 32 33

det(A) = a11a22 a33 a11a23a32 - a21a12 a33+ a21a13a32

a31a12 a23 a31a22a13

59
 Inverse of Matrix
2 4 3
For k= 6 1 5
2 1 3
Det(k) = 2(3-5)-6(12-3)-2(20-3)= -92
If A has nonzero determinant then A has
inverse, k-1
Inv(k) =BT
Bi,j = cofi,j(k)/det(A)
b23 = -[(2x1)-(4x(-2))]/-92=10/92

60
 Inverse of Matrix contd..
2 4 3
For k = 6 1 5
2 1 3
b11 =[(1x3)-(5x1)]/-92=2/92
b23 = -[(2x1)-(4x(-2))]/-92=10/92
2 9 17
B = (1/92) 28 12 8
8 10 22
2 28 8
Inv(k) =BT =(1/92) 9 12 10
17 8 22

61
 Hill Cipher: example
Plaintext: CAT, C=2, A=0, T=19
Key, k
6 24 1
k= 13 16 10 ,
20 17 15

p=[2 0 19]

c=p x k= [392 371 287] mod 26=[2 7 1]

Ciphertext=CHB

62
 Decipher text
Compute k-1
8 5 10
k-1= 21 8 21
21 12 8
8 5 10
c x k-1= [2 7 1] 21 8 21 mod 26
21 12 8
= [184 78 175] mod 26
= [2 0 19]
Alternative, c=pT x k
p = k x cT

63
 Cryptanalyst for Hill Cipher

Brute-force is extremely difficult

Statistical analysis based on the frequency on single
letter, digrams, trigrams is also not possible
Known plaintext attack is possible.
E must know size of key, m and m pairs of plaintext
and ciphertext
Assume length of plaintext and ciphertext is m

64
 Cryptanalyst for Hill Cipher

Construct m x m matrices, X and Y.

Plaintext: hillcipher and Ciphertext: HCRZSSXNSP

hiHC i.e. (7 8)K mod 26 = (7 2)

ll RZ i.e. (11 11)K mod 26 = (17 25)

65
 Cryptanalysis example
Y = Xk mod 26
7 2 7 8
= 26
17 25 11 11
k=X-1Y
1
7 8 25 22
1 = =
11 11 1 23

25 22 7 2
k=
1 23 17 25 If X is not invertible
549 600 then form additional
= 26 plaintext-ciphertext
398 577
3 2 pair
=
8 5 66
 Polyalphabetic Ciphers
For monoalphabetic cipher each letter is encrypted to
the same letter for every occurrence of the plaintext
letter
For example letter between dgvyggp
For polyalphabetic, each occurrence of a character
may have a different substitute
The relationship between a character in the plaintext to
a character in the cipher text is one to many
For example a can be enciphered to D in the
beginning and to F later
Therefore frequency of a is hidden in the cipher
Therefore statistical attack based on frequency can not
be used
For polyalphabetic, each ciphertext character is
dependent on the plaintext letter and its position

67
 Vigenre Cipher
Plaintext, p=p0, p1,,pn-1
Key, k = k0, k1, ..., km-1 (m<n)
Ciphertext, c=c0,c1, , cn-1
=(p0+ k0)mod 26 , (p1+ k1)mod 26+
Ci=(pi+ki)mod 26
Plaintext: poly 15 14 12 24
Key: beam 1 4 0 13
Ciphertext: QSLK 16 18 12 11
Decryption works in reverse
Ci=(pi-ki)mod 26

68
 Example of Vigenre Cipher

use each key letter as a additive cipher key

eg keyword: deceptive
o plaintext: we are discovered save yourself

o plaintext: wearediscoveredsaveyourself

o key: deceptivedeceptivedeceptive

69
 Example of Vigenre Cipher
key d e c e p t i v e
k
plain w e a r e d i s c o v e r e
p
c
cipher

key
k
plain d s a v e y o u r s e l f
p
c
cipher

70
 Example of Vigenre Cipher
key d e c e p t i v e d e c e p
k
plain w e a r e d i s c o v e r e
p
c
cipher

key t i v e d e c e p t i v e
k
plain d s a v e y o u r s e l f
p
c
cipher

71
 Example of Vigenre Cipher
key d e c e p t i v e d e c e p
k 3 4 2 4 15 19 8 21 4 3 4 2 4 15
plain w e a r e d i s c o v e r e
p 22 4 0 17 4 3 8 18 2 14 21 4 17 4
c
cipher

key t i v e d e c e p t i v e
k 19 8 21 4 3 4 2 4 15 19 8 21 4
plain d s a v e y o u r s e l f
p 3 18 0 21 4 24 14 20 17 18 4 11 5
c
cipher

72
 Example of Vigenre Cipher
key d e c e p t i v e d e c e p
k 3 4 2 4 15 19 8 21 4 3 4 2 4 15
plain w e a r e d i s c o v e r e
p 22 4 0 17 4 3 8 18 2 14 21 4 17 4
c 25 8 2 21 19 22 16 13 6 17 25 6 21 19
cipher Z I C V T W Q N G R Z G V T

key t i v e d e c e p t i v e
k 19 8 21 4 3 4 2 4 15 19 8 21 4
plain d s a v e y o u r s e l f
p 3 18 0 21 4 24 14 20 17 18 4 11 5
c 22 0 21 25 7 2 16 24 6 11 12 6 9
cipher W A V Z H C Q Y G L M G J

ciphertext:ZICVTWQNGRZGVTWAVZHCQYGLMGJ
73
Security of Vigenre Ciphers
Key length is 9
Therefore, letters at 1,10,19,28, are shifted by same
number
o key: deceptivedeceptivedeceptive
o plaintext: wearediscoveredsaveyourself

If two identical sequences of plaintext occur at integer

multiple of keyword length then they generate identical
cipher text.
Ex: red is repeated after 9 characters
o key: dec ept ivedec ept ive deceptive
o plaintext: wea red iscove red saveyourself
o Ciphertext: ... VTWVTW.
If message is long then there can be many repetitive
characters

74
 Autokey Cipher
keyword is concatenated with plaintext
eg. given key deceptive
plaintext: wearediscoveredsaveyourself
key: deceptivewearediscoveredsav
ciphertext: ZICVTWQNGKZEIIGASXSTSLVVWLA
Keyword and plaintext have same
frequency distribution
Statistical techniques can be used

75
 Vernam Cipher

Works on binary data

ci = pi + ki, where + is XOR operation
Decryption is pi = ci + ki
Length of key = length of plaintext
Advantage: Key has no statistical
relationship to plaintext
Disadvantage: Uses a very long but
eventually repeating key

76
 One-Time Pad
Use one key for one message
If a random key is used for each message
then cipher is secure
If two identical sequences of plaintext occur
at integer multiple of keyword length then
they generate identical cipher text.
Advantage: Ciphertext bears no statistical
relationship to the plaintext
Limitation: generation & safe distribution of
key

77
 One-time pad version of Vigenere
cipher
Key is a stream of random numbers between 0 and
26
Plaintext letters shift by key numbers
Ex: a) plaintext: sendmoremoney
key: 9 0 1 7 23 15 21 14 11 11 2 8 9
B) Determine key so that ciphertext decrypts to
plaintext cashnotneeded

78
 Example: vigenere

plain s e n d m o r e m o n e y

Plain
number
key 9 0 1 7 23 15 21 14 11 11 2 8 9

Cipher
number
cipher

79
 Example: vigenere

plain s e n d m o r e m o n e y

Plain 18 4 13 3 12 14 17 4 12 14 13 4 24
number
key 9 0 1 7 23 15 21 14 11 11 2 8 9

Cipher
number
cipher

80
 Example: vigenere

plain s e n d m o r e m o n e y

Plain 18 4 13 3 12 14 17 4 12 14 13 4 24
number
key 9 0 1 7 23 15 21 14 11 11 2 8 9

Cipher 1 4 14 10 9 3 12 18 23 25 15 12 7
number
cipher

81
 Example: vigenere

plain s e n d m o r e m o n e y

Plain 18 4 13 3 12 14 17 4 12 14 13 4 24
number
key 9 0 1 7 23 15 21 14 11 11 2 8 9

Cipher 1 4 14 10 9 3 12 18 23 25 15 12 7
number
cipher B E O K J D M S X Z P M H

82
 Example: find key to decipher

Plain C a s h n o t n e e d e d

Plain 2 0 18 7 13 14 19 13 4 4 3 4 3
number
key

Cipher 1 4 14 10 9 3 12 18 23 25 15 12 7
number
cipher B E O K J D M S X Z P M H

83
Example: find key to decipher

Plain C a s h n o t n e e d e d

Plain 2 0 18 7 13 14 19 13 4 4 3 4 3
number
key

Cipher 1= 4 14= 10 9= 3= 12= 18 23 25 15 12 7

number 27 40 35 29 38
cipher B E C K J D M S X Z P M H

84
Example: find key to decipher

Plain C a s h n o t n e e d e d

Plain 2 0 18 7 13 14 19 13 4 4 3 4 3
number
key 25 4 22 3 22 15 19 5 19 21 12 8 4

Cipher 1= 4 14= 10 9= 3= 12= 18 23 25 15 12 7

number 27 40 35 29 38
cipher B E C K J D M S X Z P M H

85
 Transposition Ciphers

Also called permutation ciphers

Hide message by rearranging the letter
order without altering the actual letters used
Can recognise these since have the same
frequency distribution as the original text

86
 Rail Fence cipher
Message letters are written diagonally over a
number of rows
Ciphertext is read off row by row
eg. plaintext: rail fence cipher
r i f n e i h r
a l e c c p e
Ciphertext:
RIFNEIHRALECCPE

87
 Row Transposition Ciphers
Message is arranged in 2-D array
Reorder the columns according to some key before
reading off the rows
Plaintext: attack postponed until two am

Key: 4 3 1 2 5 6 7

Matrix : a t t a c k p
o s t p o n e
d u n t i l t
w o a m x y z

Ciphertext: TTNAAPTMTSUOAODWCOIXKNLYPETZ

Same transposition can be done again to increase

security
88
 Product Ciphers
Ciphers using substitutions or transpositions
are not secure because of language
characteristics
Use several ciphers in succession to make it
difficult
o two substitutions make a more complex
substitution
o two transpositions make more complex
transposition
o substitution followed by a transposition makes a
new more difficult cipher

89
 Permutation/ Transposition
encryption decryption
y1 y1
x1 x1
y2 y2 x2
x2
y3 y3 x3
x3
y4 y4 x4
x4
y5 y5 x5
x5

Plaintext: springing

90
 Permutation/ Transposition
encryption decryption
s y1 y1
x1 x1

p y2 y2 x2
x2
r y3 y3 x3
x3
i y4 y4 x4
x4
n y5 y5 x5
x5

Plaintext: sprin gingx

91
 Permutation/ Transposition
encryption decryption
s y1 s y1
x1 x1

p y2 r y2 x2
x2
r y3 n y3 x3
x3
i y4 p y4 x4
x4
n y5 i y5 x5
x5

Plaintext: sprin gingx

Ciphertext: srnpi gnxig
92
 Permutation/ Transposition
encryption decryption
y1 s y1 s
x1 x1
y2 r y2 p x2
x2
y3 y3 r
n x3
x3
i
y4 p y4 x4
x4
n
y5 i y5 x5
x5

Plaintext: sprin gingx Ciphertext: srnpi gnxig

Ciphertext: srnpi gnxig Plaintext: sprin gingx
93
 Rotor cipher

Complex substitution cipher

Uses a series of cylinders, each gives one
substitution, which is rotated after each
letter was encrypted
3 cylinders have 263=17576 alphabets
n cylinders privide 26n alphabets

94
Rotor Machine Principles

95
Cryptanalysis Attacks on Encrypted Messages

96
 Ciphertext only attack
E

plaintext

A
analyze B

ciphertext ciphertext ciphertext

E knows algorithm and intercepts to find ciphertext

E tries to find key and plain text
Brute-Force attack
Statistical attack
97
Pattern attack
 Known Plaintext attack
plaintext ciphertext
E

plaintext Previous pair

A
analyze B

ciphertext ciphertext ciphertext

E has access to some plaintext-ciphertext pairs in

addition to intercepted ciphertext
98
 Chosen-Plaintext attack
Pair created from chosen plaintext
E
plaintext ciphertext E
plaintext

A analyze B

ciphertext ciphertext ciphertext

Same as known plaintext except that the

attacker has chosen plaintext and got
corresponding ciphertext
99
 Chosen-Ciphertext attack
Pair created from chosen ciphertext

E
E
plaintext ciphertext
plaintext

A
analyze B

ciphertext ciphertext ciphertext

Same as known plaintext except that the

attacker has chosen ciphertext and got
corresponding plaintext
100
 Requirements of symmetric
encryption
Strong encryption algorithm

Encryption algorithm is known to all (for low cost

chip implementation)

Secret key known only to sender and receiver

Maintain secrecy of key

Provide a secure channel to distribute key

101