Episode Details
Back to Episodes
Course 17 - Computer Network Security Protocols And Techniques | Episode 3: Modern Ciphers: Structure, Standards (DES/AES)
Published 4 months, 2 weeks ago
Description
In this lesson, you’ll learn about:
- How modern cryptography differs from classical ciphers
- The building blocks of bit-oriented encryption
- How DES, 3DES, and AES work at a high level
- Why block cipher modes of operation are necessary
- XOR (Exclusive OR) Cipher
- Performs a bitwise XOR between data and a key
- Simple but essential for mixing key material with data
- Rotation Cipher
- Rotates bits left or right with wraparound
- Helps spread bit influence across the data
- Substitution Ciphers (S-Boxes)
- Replace input bits with output bits using lookup tables
- Variants include:
- Equal size substitution (n = m)
- Expansion (n < m)
- Compression (n > m)
- Transposition / Permutation Ciphers (P-Boxes or T-Boxes)
- Reorder bits based on fixed permutation patterns
- Can preserve size or perform expansion/reduction
- Increase diffusion by spreading bit changes
- Encryption is performed over multiple rounds
- Each round applies substitution, permutation, and XOR
- Each round uses a different subkey derived from a master key
- Security increases with the number and complexity of rounds
- Early U.S. encryption standard
- Operates on 64-bit blocks
- Uses a 56-bit key (stored as 64 bits)
- Consists of 16 rounds
- Splitting input into two 32-bit halves
- Expansion P-box: 32 → 48 bits
- XOR with a 48-bit round key
- S-boxes: 48 → 32 bits
- Straight permutation
- Feistel structure swaps halves each round
- Designed to improve DES security
- Applies DES three times in an Encrypt–Decrypt–Encrypt sequence
- Key options:
- Two-key version: 112-bit security
- Three-key version: 168-bit security
- More secure than DES, but slower and largely deprecated
- Current global encryption standard
- Replaced DES and 3DES
- Operates on 128-bit blocks
- Supports three key sizes:
- 128-bit
- 192-bit
- 256-bit
- More rounds are used as key size increases
- Designed for high security and high performance
- Each block encrypted independently
- Identical plaintext blocks → identical ciphertext blocks
- Leaks patterns and is insecure
- Not recommended