Protecting stored data Flashcards
Why is it important to protect stored data?
To prevent it from being obtained by hackers and others
Even if the application or database is compromised
What is encryption?
A common security technique that uses an algorithm to scramble, or encrypt, data and then uses a key for the receiving party to unscramble, or decrypt, the data
Plaintext
Data in its readable form
Ciphertext
Data in its encrypted, unreadable form.
Encryption vs hashing
Hashing of passwords is a one way function - can convert plaintext to ciphertext but not back again
Encryption is a two-way function(convert plaintext to ciphertext and back again
Cryptography
Study of securing data from outside observers
Encryption
Act of scrambling readable data into unreadable ciphertext
Decryption
Act of scrambling unreadable ciphertext into readable data
Algorithm
Set of steps that the encryption and decryption process follows - there are many types.
A specific one is called the Cipher
Key
A random string of bits created specifically for encrypting and/or decrypting data
Each key is unique and created via an algorithm to make sure it’s unpredictable
Generated with random number generators
Modern systems generate a fresh key for every session, to add another layer of security
Longer keys are harder to crack
What is the key length for symmetric-key algorithms
128 bits
What is the key length for asymmetric-key algorithms
2048 bits
Symmetric key encryption(private)
Encryption and decryption uses the same key
The key must be kept secret