0
FR
Try Multi-Pass

Asymmetric Encryption Definition

KZero Staff
Jul 27, 2023

What is Asymmetric Encryption?

Encryption algorithms are primarily designed to protect data confidentiality, protecting against eavesdropping. Asymmetric or public key encryption is a sub-category of encryption algorithms that not only provide confidentiality but can also be used to ensure the authenticity and integrity of data.

Symmetric vs. Asymmetric Encryption

Encryption algorithms scramble data in a way that ensures that only someone with access to the correct decryption key has the ability to restore the original data. This provides strong protection against eavesdropping as long as the secret key is randomly generated and kept secret and secure.

Encryption algorithms can be broken up into two main categories based on how their secret keys work. Symmetric encryption algorithms use the same key for encryption and decryption. For this to work, the parties involved need some way to create or communicate a shared key before they can begin communicating.

Asymmetric encryption algorithms use a pair of related keys for encryption and decryption. The owner of the key generates a random private key and then derives the associated public key from this private key. As its name suggests, this public key can then be made public and is used for encrypting data or validating digital signatures.

How Asymmetric Encryption Works

In a nutshell, asymmetric encryption uses mathematical operations where one key undoes whatever the other key does. These keys are derived in a way that makes it easy to calculate the public key from the private key but infeasible to calculate the private key from the public key.

Mathematical relationships like this are the core of any asymmetric encryption algorithm. For example, some asymmetric cryptography is built around the discrete logarithm problem, which says that exponentiation is “easy” but logarithms are “hard”.

Imagine we have a message m, a private key a, and a public key A. Encryption is performed using the private key, so we could calculate a ciphertext as C = m^A mod X. (Just ignore the mod X for a moment). This ciphertext, C, would then be sent to the owner of the private key.

With the private key, a, the recipient would calculate M = C^a mod X = (m^A)^a mod X. Due to the properties of exponents, this would be equal to m^(a+A) mod X.

When setting up the public and private keys, the recipient would select a and A so that y^(a+A) mod X = y for any y. In this context, mod X means to divide the result by X and keep the remainder (i.e. 24 mod 5 = 4).

With these carefully selected values for a and A, M = C^a mod X = m^(a+A) mod X = m mod X. This is the original message, meaning that the recipient can read whatever was sent to them.

Asymmetric Cryptography Beyond Encryption

The use of a public/private key pair makes public key cryptography extremely powerful. In addition to encrypting data, the same public/private key pair can also be used to generate digital signatures.

A digital signature algorithm essentially flips the encryption process on its head. The owner of the private key can “encrypt” some data with their private key, generating a signature. This signature can be verified by “decrypting” it with the corresponding public key and comparing it to the original message.

Digital signature algorithms provide several benefits beyond confidentiality, including:

  • Authentication: Only someone with knowledge of the private key can generate a valid digital signature.
  • Integrity: Any modifications to the signed data will cause the signature to no longer match.
  • Non-Repudiation: If only the owner of a private key can generate a valid signature, the existence of a signature on a message means that they signed it.

Conclusion

Asymmetric cryptography is fundamental to the modern digital age. Since only the public key is shared, it allows users to communicate secretly without first sharing a  secret key. Additionally, its ability to ensure authentication, integrity, and non-repudiation is vital to secure web browsing (i.e. with HTTPS) and many other things we do every day.

Previous Topic
Next Topic
KZero Staff

Explore more insightful content from the knowledgeable KZero staff on our blog and guides section.

Glossary Terms

A
B
C
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Z
AAA Cyber Security Definition Access Control List Definition Account Sharing Definition Active Directory Certificate Services Definition Active Directory Federation Services Definition Adaptive Authentication Definition Advanced Encryption Standard (AES) Advanced Persistent Threat (APT) Definition Adware Definition AiTM Definition Altcoins API Definition ARP Cache Poisoning Attack Definition Asymmetric Encryption Definition Attack Surface Analysis Definition Attack Vectors Definition Authentication Authentication Protocols Definition Automated Compliance Definition
Beaconing Definition Behavioral Biometrics Definition Biometric Authentication Definition Bitcoin Blockchain Blockchain Authentication Definition Border Gateway Protocol (BGP) Definition Bot Definition Botnet Definition Brute Force Attack Definition BYOD Definition
CA Certs Definition Canary Cyber Security Definition Catfishing Definition Central Logging Definition Certificate Authority Definition Challenge handshake authentication protocol CHAP Authentication Definition CIA Triad Definition Cipher Definition Cipher Suite Definition Ciphertext Definition CIS Click Fraud Definition Cloud Data Security Definition Cloud Security Risks Definition Computer Viruses Definition Continuous Authentication Definition Corporate Account Takeover Definition Credential Stuffing Definition Cross-site Scripting Definition CRUD Definition Crypto Cryptographic Hash Definition Cryptojacking Definition Cyber insurance Cyber Kill Chain Definition Cybersecurity Cybersecurity Analytics Definition Cybersecurity Honeypot Definition Cyberwarfare Definition
Dark Web Definition Data Breach Definition Data Exfiltration Definition Data Integrity Definition Data Obfuscation Ddos Definition Deep Packet Inspection Definition Deep Web vs Dark Web Definition Demilitarized Zone / DMZ Network Definition Denial-of-Service (DoS) Definition DevOps Security Definition Dictionary Attacks Definition DID (Decentralized Identity) Diffie Hellman Algorithm Definition Digest Access Authentication Digital Forensics Definition Digital ID Digital Signature Digital Signature Algorithm (DSA) Digital Signature Standard (DSS) Distributed Key DMARC Definition DNS Leak Protection Definition Domain Name Service (DNS) Definition Doxxed Definition DRM Definition
Elliptic Curve Digital Signature Algorithm (ECDSA) Definition Email Hijacking Definition Encryption Definition Endpoint Detection and Response (EDR) Definition Endpoint Management Definition Endpoint Security Definition Equifax Security Breach Ethereum Ethernet Switch Definition Extensible Authentication Protocol (EAP) Method Definition Eye Authentication
Face Authentication Facial Recognition Definition Fake Hacking Definition Fault Tolerance Definition Federated Authentication Definition FIDO Alliance FIDO Biometrics FIDO Client Software SDK FIDO Cloud Authentication FIDO IoT Security FIDO Server FIDO U2F Authentication FIDO UAF Fido2 Definition Fileless Malware Definition Fingerprint Biometrics Definition Firewall Definition Firewall Rule Definition Firmware Definition Forensic Analysis Definition
Golden Ticket Attack Definition Google Authenticator Google Authenticator Definition Google Authenticator Push Notification
Hacking Definition Hacktivism Definition Hash Functions Definition Heap Spraying Definition HOTP Definition How Does a VPN Work Hybrid Cloud Definition Hyperscale Definition
IAM Definition ICMP Definition ID Ransomware Definition ID Ransomware Definition Howard Poston Identity Authentication Definition Identity Governance Identity Proofing Identity Verification Definition Identity-Based Encryption IDP Definition IKE Definition Incident Response Definition Ingress Vs. Egress Definition Insider Threat Definition Intrusion Detection System Definition IoT Edge Definition
JWT Authentication Definition
Key Agreement vs. Key Exchange Definition Key Distribution Center Definition Key management Keylogging
Latency Definition Lateral Movement Meaning LDAP Definition Log Formats Definition Log Management Definition
Machine Learning Cyber Security Definition Magic Links Definition Malvertising Definition Malware Definition Man in the Middle (MITM) Attack MDM Protocol Definition MDR Definition Meterpreter Definition MFA Push Notification Mimikatz MITC Definition MITRE ATT&CK Framework Definition Mobile Authentication Definition MS-DOS Definition MSSP Meaning Multi-factor Authentication Definition
Network Edge Definition Network Security Definition Node NTLM Authentication NTLM Authentication Definition NTLM Definition
OAuth 2.0 Definition OAuth Definition OCSP Definition On-Path Attack Definition One-Factor Authentication Definition One-Time Password Definition Open banking OpenID Connect Flow Definition OPSEC Definition OTP Definition Out-of-band authentication
PAM Tools Definition Parse Logs Definition Passkeys Password Complexity Password Hashing Password Reuse Password Spraying Definition Passwordless Authentication Penetration Testing Definition Personally identifiable information (PII) PGP Definition Phishing Definition PKI Architecture Definition PKI Authentication Definition PKI Certificates Definition Port Scanning Definition Pretexting Definition Privileged Access Management Definition Protected health information (PHI) Proxy Server Definition PSD1 Definition PSD2 Definition Public Key Encryption Definition Push Authentication
QoS Definition QR Code Authentication Quantum Computing Quantum Cryptography Quantum Encryption
RADIUS Protocol Definition Rainbow Table Random Number Generator Ransomware Red Team Remote Access Trojan Definition REST API Definition REST Protocols Definition Reverse Engineering Risk-Based Authentication Rootkit Definition
Salted Hash Definition SAML Definition SAML Handshake Definition SAML MFA SAML vs OAuth SASE Definition Scareware Definition SCIM Definition SCRAM Definition Security as a Service Security Keys Definition Security Mesh Security Tokens Definition Session Hijacking Definition Shellcode Shoulder Surfing Definition Sidejacking Definition SIEM Definition Single Sign-On Definition Single-Factor Authentication Site-to-Site VPN Smart Card Authentication SOAP Protocol Definition SOAP Secure Definition Social Engineering Software Patch Definition Spam Filter Spambot Spear Phishing Spoofing Definition Spoofing IP Address Spraying Attack Spyeye Definition Spyware SQL Injection SQRL Definition SSH Definition SSL Definition SSL Stripping Attack SSO Definition Stateful Firewall Definition Step-Up Authentication Stuxnet Symmetric Encryption Symmetric Encryption Symmetric Key Symmetric Key Cryptography Symmetric vs Asymmetric Encryption System Logging
Tailgating Attack Thin Client Definition Threat Actor Threat Hunting Threat Intelligence Threat Modeling Ticket-Granting Ticket (TGT) Definition Tiny Banker Trojan Tokenization Definition Tokenized Authentication TOTP Definition Traceroute Definition Transmission Control Protocol (TCP) Definition Transparent Proxy Trickbot Trojan horse Trojan Virus Definition Trustless Two-factor authentication
U2F (Universal 2nd Factor) Definition UDP (User Datagram Protocol) UEBA (User and Entity Behavior Analytics) KZero Staff Unified Threat Management (UTM) URL Filtering
Virus Virus vs. Worm VPN Blocker Definition VPN Routers VPN vs Proxy
WAF Definition WAF vs Firewall WAN Aggregation WannaCry Wardriving Definition Watering Hole Attack Web3 What Is A Key Logger What Is An Exploit What Is Bricking What Is Caching What Is Ctap What Is Fido What is LDAP What Is Sandboxes What Is Snort What Is Soar What Is SSH What Is TGT White Hat Hacking Wi-Fi Snooping Wireless Networks Worm Virus Definition
XDR Definition
Zero Knowledge Proof Zero Trust Definition Zero-Day Exploit Zero-Day Vulnerability
Stay up to date with the most recent #infosec topics
Threat Intelligence Altcoins ID Ransomware Definition Howard Poston Symmetric Encryption

Trending Topics

Google Authenticator Push Notification Account Sharing Definition ID Ransomware Definition

Share the page: