Seventh Edition, Global Edition

by William Stallings
 Chapter 3
Classical Encryption
Techniques
© 2017 Pearson Education, Ltd., All rights reserved.
 Definitions
Plaintext Ciphertext Enciphering/
• An original • The coded
encryption
• The process of
message message converting from
plaintext to
ciphertext

Deciphering/ Cryptography Cryptographic

decryption • The area of study of system/cipher
• Restoring the the many schemes • A scheme
plaintext from the used for encryption
ciphertext

Cryptanalysis Cryptology
• Techniques used for • The areas of
deciphering a cryptography and
message without any cryptanalysis
knowledge of the
enciphering details
© 2017 Pearson Education, Ltd., All rights reserved.
© 2017 Pearson Education, Ltd., All rights reserved.
 Symmetric Cipher
Model
• There are two requirements for secure
use of conventional encryption:
• A strong encryption algorithm

• Sender and receiver must have

obtained copies of the secret key in a
secure fashion and must keep the key
secure

© 2017 Pearson Education, Ltd., All rights reserved.

© 2017 Pearson Education, Ltd., All rights reserved.
 Cryptographic
Systems
• Characterized along three independent
dimensions:
The type of
operations used for The way in which
The number of
transforming the plaintext is
keys used
plaintext to processed
ciphertext

Symmetric,
single-key,
Substitution secret-key, Block cipher
conventional
encryption

Asymmetric,
two-key, or
Transposition Stream cipher
public-key
encryption

© 2017 Pearson Education, Ltd., All rights reserved.

 © 2017 Pearson Education, Ltd., All rights reserved.
Brute-force Cryptanalysis
attack • Attack relies on
• Attacker tries the nature of
the algorithm
every possible
plus some
key on a piece
knowledge of
of ciphertext
the general
until an
characteristics
intelligible
of the plaintext
translation into
• Attack exploits
plaintext is
obtained the
• On average, characteristics
of the
half of all
algorithm to
possible keys
attempt to
must be tried
deduce a
to achieve
specific
success
plaintext or to
deduce the key
being used
Brute-Force Attack
Cryptanalysis and
 Table 3.1
Encrypted
Messages

Types of
Attacks
on
© 2017 Pearson Education, Ltd., All rights reserved.
 Encryption Scheme
Security
• Unconditionally secure
• No matter how much time an opponent
has, it is impossible for him or her to
decrypt the ciphertext simply because
the required information is not there

• Computationally secure
• The cost of breaking the cipher exceeds
the value of the encrypted information
• The time required to break the cipher
exceeds the useful lifetime of the
information
© 2017 Pearson Education, Ltd., All rights reserved.
 Brute-Force Attack
O
n
a
v
e
r
a
g
e
,
h
a
lf
o
f
a
l
p
o
s
s
i
b
l
e

k
e
y
s

m
u
s
t
b
e

tri
e
d

t
o

a
c
h
i
e
v
e

s
u
c
c
e
s
s

T
o

s
u
p
p
l
e
m
e
n
t

t
h
e

b
r
u
t
e
-
f
o
r
c
e

a
p
p
r
o
a
c
h
,

s
o
m
e

d
e
g
r
e
e

o
f

k
n
o
w
l
e
d
g
e

a
b
o
u
t

t
h
e

e
x
p
e
c
t
e
d

p
l
a
i
n
t
e
x
t

i
s

n
e
e
d
e
d
,

a
n
d

s
o
m
e

m
e
a
n
s

o
f

a
u
t
o
m
a
t
i
c
a
l
l
y

d
i
s
t
i
n
g
u
i
s
h
i
n
g

p
l
a
i
n
t
e
x
t

f
r
o
m

g
a
r
b
l
e

i
s

a
l
s
o

n
e
e
d

© 2017 Pearson Education, Ltd., All rights reserved.

e
d
 Substitution
Technique
• Is one in which the letters of plaintext
are replaced by other letters or by
numbers or symbols

• If the plaintext is viewed as a sequence

of bits, then substitution involves
replacing plaintext bit patterns with
ciphertext bit patterns

© 2017 Pearson Education, Ltd., All rights reserved.

 Caesar Cipher
• Simplest and earliest known use of a substitution
cipher

• Used by Julius Caesar

• Involves replacing each letter of the alphabet with the

letter standing three places further down the alphabet

• Alphabet is wrapped around so that the letter

following Z is A

plain: meet me after the toga party

cipher: PHHW PH DIWHU WKH WRJD SDUWB

© 2017 Pearson Education, Ltd., All rights reserved.

 Caesar Cipher
Algorithm
• Can define transformation as:
a b c d e f g h i j k l m n o p q r s t u v w x y z
D E F G H I J K L M N O P Q R S T U V W X Y Z A B C

• Mathematically give each letter a number

a b c d e f g h i j k l m n o p q r s t u v w x y z
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25

• Algorithm can be expressed as:

c = E(3, p) = (p + 3) mod (26)

• A shift may be of any amount, so that the general Caesar

algorithm is:
C = E(k , p ) = (p + k ) mod 26
• Where k takes on a value in the range 1 to 25; the
decryption algorithm is simply:

p = D(k , C ) = (C - k ) mod 26
© 2017 Pearson Education, Ltd., All rights reserved.
 Figure 3.3

Brute-Force
Cryptanalysi
s
of
Caesar
Cipher
(This chart can be found on page 75 in the
textbook)

© 2017 Pearson Education, Ltd., All rights reserved.

 Sample of Compressed
Text

© 2017 Pearson Education, Ltd., All rights reserved.

 Monoalphabetic
Cipher
• Permutation
• Of a finite set of elements S is an ordered
sequence of all the elements of S , with each
element appearing exactly once

• If the “cipher” line can be any permutation

of the 26 alphabetic characters, then there
are 26! or greater than 4 x 1026 possible keys
• This is 10 orders of magnitude greater than the
key space for DES
• Approach is referred to as a monoalphabetic
substitution cipher because a single cipher
alphabet is used per message
© 2017 Pearson Education, Ltd., All rights reserved.
© 2017 Pearson Education, Ltd., All rights reserved.
 Monoalphabetic
Ciphers
• Easy to break because they reflect the
frequency data of the original alphabet

• Countermeasure is to provide multiple

substitutes (homophones) for a single letter

• Digram
• Two-letter combination
• Most common is th

• Trigram
• Three-letter combination
• Most frequent is the
© 2017 Pearson Education, Ltd., All rights reserved.
 Playfair Cipher
• Best-known multiple-letter encryption cipher

• Treats digrams in the plaintext as single units

and translates these units into ciphertext
digrams
• Based on the use of a 5 x 5 matrix of letters
constructed using a keyword
• Invented by British scientist Sir Charles
Wheatstone in 1854
• Used as the standard field system by the
British Army in World War I and the U.S. Army
andLtd.,
© 2017 Pearson Education, other Allied forces during World War II
All rights reserved.
 Playfair Key Matrix
• Fill in letters of keyword (minus
duplicates) from left to right and from
top to bottom, then fill in the remainder
of the matrix with the remaining letters
in alphabetic order

• Using the keyword

M O MONARCHY:
N A R
C H Y B D
E F G I/J K
L P Q S T
U V W X Z

© 2017 Pearson Education, Ltd., All rights reserved.

© 2017 Pearson Education, Ltd., All rights reserved.
 Hill Cipher
• Developed by the mathematician Lester
Hill in 1929
• Strength is that it completely hides single-
letter frequencies
• The use of a larger matrix hides more
frequency information
• A 3 x 3 Hill cipher hides not only single-
letter but also two-letter frequency
information

• Strong against a ciphertext-only attack but

easily broken with a known plaintext attack
© 2017 Pearson Education, Ltd., All rights reserved.
 Polyalphabetic
Ciphers
• Polyalphabetic substitution cipher
• Improves on the simple monoalphabetic
technique by using different
monoalphabetic substitutions as one
proceeds through the plaintext message

All these techniques

have the following
features in common:
•A set of related monoalphabetic substitution rules is used
•A key determines which particular rule is chosen for a given transformation

© 2017 Pearson Education, Ltd., All rights reserved.

 Vigenère Cipher
• Best known and one of the simplest
polyalphabetic substitution ciphers

• In this scheme the set of related

monoalphabetic substitution rules
consists of the 26 Caesar ciphers with
shifts of 0 through 25

• Each cipher is denoted by a key letter

which is the ciphertext letter that
substitutes for the plaintext letter a
© 2017 Pearson Education, Ltd., All rights reserved.
 Example of Vigenère
Cipher
• To encrypt a message, a key is needed that is as
long as the message
• Usually, the key is a repeating keyword

• For example, if the keyword is deceptive, the

message “we are discovered save yourself” is
encrypted as:

key: deceptivedeceptivedeceptive
plaintext: wearediscoveredsaveyourself
ciphertext: ZICVTWQNGRZGVTWAVZHCQYGLMGJ
© 2017 Pearson Education, Ltd., All rights reserved.
 Vigenère Autokey System
• A keyword is concatenated with the plaintext
itself to provide a running key

• Example:
key: deceptivewearediscoveredsav
plaintext: wearediscoveredsaveyourself
ciphertext: ZICVTWQNGKZEIIGASXSTSLVVWLA

• Even this scheme is vulnerable to

cryptanalysis
• Because the key and the plaintext share the
same frequency distribution of letters, a
statistical technique can be applied
© 2017 Pearson Education, Ltd., All rights reserved.
 Vernam Cipher

© 2017 Pearson Education, Ltd., All rights reserved.

 One-Time Pad
• Improvement to Vernam cipher proposed by an Army Signal
Corp officer, Joseph Mauborgne
• Use a random key that is as long as the message so that the
key need not be repeated
• Key is used to encrypt and decrypt a single message and
then is discarded
• Each new message requires a new key of the same length as
the new message
• Scheme is unbreakable
• Produces random output that bears no statistical relationship
to the plaintext
• Because the ciphertext contains no information whatsoever
about the plaintext, there is simply no way to break the code
© 2017 Pearson Education, Ltd., All rights reserved.
 Difficulties
• The one-time pad offers complete security but, in practice,
has two fundamental difficulties:
• There is the practical problem of making large quantities of
random keys
• Any heavily used system might require millions of random
characters on a regular basis
• Mammoth key distribution problem
• For every message to be sent, a key of equal length is needed
by both sender and receiver

• Because of these difficulties, the one-time pad is of limited

utility
• Useful primarily for low-bandwidth channels requiring very
high security

• The one-time pad is the only cryptosystem that exhibits

perfect secrecy (see Appendix F)
© 2017 Pearson Education, Ltd., All rights reserved.
 Rail Fence Cipher
• Simplest transposition cipher

• Plaintext is written down as a sequence of

diagonals and then read off as a sequence of
rows

• To encipher the message “meet me after the

toga party” with a rail fence of depth 2, we
would write:
mematrhtgpry
etefeteoaat
Encrypted message is:
MEMATRHTGPRYETEFETEOAAT
© 2017 Pearson Education, Ltd., All rights reserved.
 Row Transposition Cipher
• Is a more complex transposition

• Write the message in a rectangle, row by row, and

read the message off, column by column, but
permute the order of the columns
• The order of the columns then becomes the key to
the algorithm
Key: 4 3 1 2 5 6 7
Plaintext: atta c kp
ostpone
dunt i l t
w o a mx y z
Ciphertext:
TTNAAPTMTSUOAODWCOIXKNLYPETZ
© 2017 Pearson Education, Ltd., All rights reserved.
© 2017 Pearson Education, Ltd., All rights reserved.
 Steganography

© 2017 Pearson Education, Ltd., All rights reserved.

 • Character marking
• Selected letters of printed or
typewritten text are over-
Other written in pencil
• The marks are ordinarily not
Steganograph visible unless the paper is
held at an angle to bright
y Techniques light
• Invisible ink
• A number of substances can
be used for writing but leave
no visible trace until heat or
some chemical is applied to
the paper
• Pin punctures
• Small pin punctures on
selected letters are ordinarily
not visible unless the paper is
held up in front of a light
• Typewriter correction
ribbon
• Used between lines typed
© 2017 Pearson Education, Ltd., All rights reserved.
with a black ribbon, the
 Steganography vs. Encryption

• Steganography • The advantage of

has a number of steganography
• It can be employed by
drawbacks when parties who have
compared to something to lose
encryption should the fact of their
secret communication
• It requires a lot of (not necessarily the
overhead to hide a content) be
relatively few bits of discovered
information • Encryption flags traffic
as important or secret
• Once the system is
or may identify the
discovered, it sender or receiver as
becomes virtually someone with
worthless something to hide

© 2017 Pearson Education, Ltd., All rights reserved.

 Summary
• Symmetric Cipher • Substitution
Model techniques
• Cryptography • Caesar cipher
• Cryptanalysis and • Monoalphabetic
Brute-Force Attack ciphers
• Playfair cipher
• Transposition
• Hill cipher
techniques
• Polyalphabetic
• Rotor machines ciphers
• One-time pad

• Steganography
© 2017 Pearson Education, Ltd., All rights reserved.