Encryption | Science & Technology for UPSC CSE PDF Download

Types of Encryption

• Symmetric Encryption: In symmetric encryption, a single secret key is used for both encryption and decryption. All parties involved in communication share this key.
• Asymmetric Encryption (Public Key Encryption): Asymmetric encryption involves two keys - a public key for encryption and a private key for decryption. The private key is kept secret, while the public key is shared openly.

Importance of Data Encryption

1. Privacy:

• Protection of Sensitive Data: Encryption safeguards data from unauthorized access, ensuring that only intended recipients or data owners can decipher it.
• Prevention of Interception: It prevents attackers, ad networks, ISPs, and governments from intercepting and reading sensitive data.

2. Security:

• Data Breach Prevention: Encryption helps prevent data breaches by securing data in transit or at rest. Even if a device is lost or stolen, encrypted data remains secure.
• Secure Communication: Encrypted communication allows the exchange of sensitive data without exposing it to potential eavesdropping.

3. Data Integrity:

• Protection from Tampering: Encryption, combined with integrity checks, ensures that transmitted data remains unaltered during transit, preventing on-path attacks.

4. Authentication:

• Website Verification: Public key encryption verifies a website's authenticity by confirming that the website's TLS certificate matches its private key. This helps users trust that they are connected to the legitimate website.

5. Regulatory Compliance:

• Mandatory Encryption: Industry and government regulations, such as HIPAA, PCI-DSS, and GDPR, mandate encryption for organizations handling user data to protect privacy and security.

Challenges

1. National Security:

• Use by Non-state Actors: Encrypted messages can be exploited by terrorists and non-state entities, posing a threat to a nation's sovereignty and integrity.

2. Vulnerable Communities:

• Social Media Issues: Encryption can make it challenging to restrict social media trolling, hate messages, and the distribution of illegal content like child pornography.

3. Data Authenticity:

• Fake Messages: Encryption can make it difficult to verify the authenticity of messages on social media platforms, leading to the spread of fake news and misinformation.

4. Attribution Challenges:

• State vs. Non-state Actors: It can be hard to differentiate whether a cyber-attack or malicious act was orchestrated by a state actor or a non-state actor due to the anonymity provided by encryption.