An Introduction to Cryptography

Transcription

1 An Introduction to Cryptography Spotlight on Science J. Robert Buchanan Department of Mathematics Spring 2008

2 What is Cryptography? cryptography: study of methods for sending messages in a form that only be understood by the recipient. cryptanalysis: study of methods for defeating cryptography. cryptology: study of both cryptography and cryptanalysis.

3 Cryptology Throughout History Subject as old as recorded history.

4 Cryptology Throughout History Subject as old as recorded history. Julius Caesar used substitution ciphers for military and personal communication.

5 History (cont.) Enigma patented by Arthur Scherbius in 1918 (became the foundation of German and Japanese codes during WWII). Photo credit: JRB

6 History (cont.) Since WWII foundation of cryptology has been mathematics, particularly number theory. Photo credit: JRB

7 Terminology Plaintext: the un-encrypted, clearly readable form of a message. Ciphertext: the encrypted form of the plaintext, readable only with the key to the cipher. To tell them apart we will write plaintext in lowercase and ciphertext in UPPERCASE.

8 Modular Arithmetic Definition Two integers n and m are congruent modulo k (or equivalent modulo k) written symbolically as when k divides n m evenly. n m (mod k) Example (mod 26) since = 1.

9 Modular Arithmetic Definition Two integers n and m are congruent modulo k (or equivalent modulo k) written symbolically as when k divides n m evenly. n m (mod k) Example (mod 26) since = 1. What other integers are equivalent to 13 modulo 26?

10 Monoalphabetic Substitution Ciphers Definition A monoalphabetic substitution cipher substitutes each letter in the plaintext with an alternate letter to form the ciphertext.

11 Monoalphabetic Substitution Ciphers Definition A monoalphabetic substitution cipher substitutes each letter in the plaintext with an alternate letter to form the ciphertext. Question: how do we make the substitution?

12 Monoalphabetic Substitution Ciphers Definition A monoalphabetic substitution cipher substitutes each letter in the plaintext with an alternate letter to form the ciphertext. Question: how do we make the substitution? An answer: using modular arithmetic.

13 Positional Representation of the Alphabet Associate each letter with an integer giving its position in the standard alphabet. a b c d e f g h i j k l m n o p q r s t u v w x y z Take the letter at position i and replace it with the letter at position (i + 5) (mod 26). This is called an additive cipher with key 5.

14 Example a b c d e f g h i j k l m F G H I J K L M N O P Q R n o p q r s t u v w x y z S T U V W X Y Z A B C D E

15 Example a b c d e f g h i j k l m F G H I J K L M N O P Q R n o p q r s t u v w x y z S T U V W X Y Z A B C D E Now encrypt One if by land, two if by sea.

16 Plaintext to Ciphertext Plaintext: One if by land, two if by sea. o n e i f b y l a n d t w T S J N K G D Q F S I Y B o i f b y s e a T N K G D X J F Ciphertext: TSJ NK GD QFSI, YBT NK GD XJF.

17 Questions 1 Can you see any deficiencies in this way of encrypting the plaintext? 2 How could it be improved?

18 Answers Frequently occurring single letter words ( a and I ), common two-letter combinations ( an, in, if, etc.) called digraphs, and common three-letter combinations ( and, the, ion, etc.) called trigraphs can give clues to the cipher key. To help hide these clues, encrypted messages are often written in letter blocks of length five. Thus our encrypted message would be formatted as: TSJNK GDQFS IYBTN KGDXJ F

19 Decrypting the Ciphertext Suppose you receive a ciphertext, how do you read it?

20 Decrypting the Ciphertext Suppose you receive a ciphertext, how do you read it? If you have the key, you must apply its additive inverse cipher to the ciphertext to reveal the plaintext.

21 Decrypting the Ciphertext Suppose you receive a ciphertext, how do you read it? If you have the key, you must apply its additive inverse cipher to the ciphertext to reveal the plaintext. What is the additive inverse of 5 (mod 26)?

22 Decrypting the Ciphertext Suppose you receive a ciphertext, how do you read it? If you have the key, you must apply its additive inverse cipher to the ciphertext to reveal the plaintext. What is the additive inverse of 5 (mod 26)? (q + 5) (mod 26) 0 q = 1 q = 21

23 Decryption A B C D E F G H I J K L M v w x y z a b c d e f g h N O P Q R S T U V W X Y Z i j k l m n o p q r s t u

24 Example A B C D E F G H I J K L M v w x y z a b c d e f g h N O P Q R S T U V W X Y Z i j k l m n o p q r s t u Ciphertext H M J J X J G Z W L J W Plaintext

25 Example A B C D E F G H I J K L M v w x y z a b c d e f g h N O P Q R S T U V W X Y Z i j k l m n o p q r s t u Ciphertext H M J J X J G Z W L J W Plaintext c h e e s e b u r g e r

26 What if You Don t Have the Key? Questions: 1 If the letter a occurs 10 times in the plaintext and F is substituted for a in the ciphertext, how often will F occur in the ciphertext?

27 What if You Don t Have the Key? Questions: 1 If the letter a occurs 10 times in the plaintext and F is substituted for a in the ciphertext, how often will F occur in the ciphertext?

28 What if You Don t Have the Key? Questions: 1 If the letter a occurs 10 times in the plaintext and F is substituted for a in the ciphertext, how often will F occur in the ciphertext? 2 How often do various letters and letter combinations occur in English writing?

29 Single Letter Frequencies Letter Position Frequency Letter Position Frequency a n b o c p d q e r f s g t h u i v j w k x l y m z

30 Highest to Lowest Frequencies Letter Position Frequency Letter Position Frequency e m t w a f o g i y n p s b h v r k d j l x c q u z

31 Challenge Decrypt the following ciphertext: VUNIR RAWBL RQZRR GVATJ VGULB HGBQN LNAQG NYXVA TNOBH GPELC GBTEN CULVU BCRLB HYRNE ARQFB ZRGUV ATNOB HGGUR CBJRE NAQHG VYVGL BSZNG URZNG VPFNA QUBJV GCYNL FNAVZ CBEGN AGEBY RVABH EYVIR FJURA LBHQR PELCG GUVFZ RFFNT RCYRN FRFRA QNARZ NVYGB EBORE GQBGO HPUNA NANGZ VYYRE FIVYY RQBGR QH

32 Public Key Cryptography In the previous cryptographic systems, the key used to encipher the message must be kept hidden from the public and should be known only by the sender and recipient of the message. There are other cryptographic systems in which each party has a private key (which they keep secret) and a public key which they publish so that others may send them encrypted messages which only they can decrypt. The public key functions as the recipient s cryptographic telephone number.

33 Overview of Public Key Cryptography Suppose Alice wants to send Bob a message which only Bob will be able to read. 1 Alice looks up Bob s public key and enciphers the plaintext using his public key.

34 Overview of Public Key Cryptography Suppose Alice wants to send Bob a message which only Bob will be able to read. 1 Alice looks up Bob s public key and enciphers the plaintext using his public key. 2 Alice sends Bob the ciphertext (or even publishes it in the newspaper!).

35 Overview of Public Key Cryptography Suppose Alice wants to send Bob a message which only Bob will be able to read. 1 Alice looks up Bob s public key and enciphers the plaintext using his public key. 2 Alice sends Bob the ciphertext (or even publishes it in the newspaper!). 3 Bob decrypts the ciphertext using his private key.

36 RSA Public Key Cryptography One of the most popular public key cryptographic systems is known as RSA. It was developed by Adi Shamir Ronald Rivest Leonard Adelman.

37 A Little Number Theory Definition A prime number is a whole number p greater than 1 whose only divisors are p and 1. An integer which is not prime is called a composite number.

38 A Little Number Theory Definition A prime number is a whole number p greater than 1 whose only divisors are p and 1. An integer which is not prime is called a composite number. Definition If a and b are positive integers, the greatest common divisor of a and b is number denoted gcd(a, b) and is the positive integer d satisfying both of the following properties: d divides a and d divides b, if c is and integer and c divides a and c divides b, then c divides d.

39 A Little Number Theory Definition A prime number is a whole number p greater than 1 whose only divisors are p and 1. An integer which is not prime is called a composite number. Definition If a and b are positive integers, the greatest common divisor of a and b is number denoted gcd(a, b) and is the positive integer d satisfying both of the following properties: d divides a and d divides b, if c is and integer and c divides a and c divides b, then c divides d. Definition If gcd(a, b) = 1 we say that a and b are relatively prime.

40 Examples Example 4 = gcd(16, 60) 13 = gcd(13, 65)? = gcd(72, 81)

41 Euclidean Algorithm To find the gcd(a, b): 1 If b divides a evenly, gcd(a, b) = b. 2 If not, replace a by b and replace b by the remainder of a b and go back to step 1. A Java applet implementing the Euclidean Algorithm is also available.

42 Example Example Find gcd(105, 56) using the Euclidean Algorithm.

43 Example Example Find gcd(105, 56) using the Euclidean Algorithm. a b gcd(105, 56) = 7

44 Linear Combinations Definition If a and b are integers, then an expression of the from ax + by where x and y are also integers is called a linear combination of a and b.

45 Linear Combinations Definition If a and b are integers, then an expression of the from ax + by where x and y are also integers is called a linear combination of a and b. Theorem If a and b are integers, then gcd(a, b) is the smallest positive integer which can be written as a linear combination of a and b.

46 Linear Combinations Definition If a and b are integers, then an expression of the from ax + by where x and y are also integers is called a linear combination of a and b. Theorem If a and b are integers, then gcd(a, b) is the smallest positive integer which can be written as a linear combination of a and b. Corollary If a and b are relatively prime then b has a multiplicative inverse modulo a.

47 Extended Euclidean Algorithm To find x and y such that use the tabular method. gcd(a, b) = ax + by Start the table like this: x y d 1 0 a 0 1 b???

48 Extended Euclidean Algorithm To find x and y such that gcd(a, b) = ax + by use the tabular method. Start the table like this: x y d 1 0 a 0 1 b??? To fill in the next row: 1 Find q and r such that a b = q + r b. 2 Multiply next to last row by q and subtract from third to last row. 3 Keep appending rows to the table until r = 0.

49 Example x y d ( 1)(105) + (2)(56) = 7 A Java applet implementing the Extended Euclidean Algorithm is also available.

50 Finding a Multiplicative Inverse Verify that 23 and 29 are relatively prime and find the multiplicative inverse of 29 modulo 23. x y d (4)(29) + ( 5)(23) (mod 23) 1 (4)(29) (mod 23) So 4 is the multiplicative inverse of 29 modulo 23.

51 More Number Theory Definition If N is the set of all positive integers then for each positive integer n define φ(n) to be the number of positive integers less than or equal to n which are relatively prime to n. Such a function φ is called the Euler phi function.

52 More Number Theory Definition If N is the set of all positive integers then for each positive integer n define φ(n) to be the number of positive integers less than or equal to n which are relatively prime to n. Such a function φ is called the Euler phi function. Example Do you notice a pattern? n

53 Euler Phi Function n φ(n) n φ(n)

54 Euler Phi Function n φ(n) n φ(n) Lemma If p is prime, then φ(p) = p 1.

55 Euler Phi Function n φ(n) n φ(n) Lemma If p is prime, then φ(p) = p 1. Lemma If p and q are distinct primes, then φ(pq) = φ(p)φ(q) = (p 1)(q 1).

56 Getting Public and Private Keys A public agency (call it the Key Utility ) 1 selects two large primes p and q, 1 let p = 1009 and q = 2003.

57 Getting Public and Private Keys A public agency (call it the Key Utility ) 1 selects two large primes p and q, 2 forms the product n = pq, 1 let p = 1009 and q = n =

58 Getting Public and Private Keys A public agency (call it the Key Utility ) 1 selects two large primes p and q, 2 forms the product n = pq, 3 computes φ(n), 1 let p = 1009 and q = n = φ( ) = (1009 1)(2003 1) =

59 Getting Public and Private Keys A public agency (call it the Key Utility ) 1 selects two large primes p and q, 2 forms the product n = pq, 3 computes φ(n), 4 selects integer e such that gcd(e, φ(n)) = 1, 1 let p = 1009 and q = n = φ( ) = (1009 1)(2003 1) = e = 1003 (for example)

60 Getting Public and Private Keys A public agency (call it the Key Utility ) 1 selects two large primes p and q, 2 forms the product n = pq, 3 computes φ(n), 4 selects integer e such that gcd(e, φ(n)) = 1, 5 finds the multiplicative inverse d of e (mod φ(n)), 1 let p = 1009 and q = n = φ( ) = (1009 1)(2003 1) = e = 1003 (for example) 5 d = (for this e)

61 Getting Public and Private Keys A public agency (call it the Key Utility ) 1 selects two large primes p and q, 2 forms the product n = pq, 3 computes φ(n), 4 selects integer e such that gcd(e, φ(n)) = 1, 5 finds the multiplicative inverse d of e (mod φ(n)), 6 private key is d, public key is (e, n). 1 let p = 1009 and q = n = φ( ) = (1009 1)(2003 1) = e = 1003 (for example) 5 d = (for this e) 6 private key is , public key is (1003, ).

62 Getting Public and Private Keys A public agency (call it the Key Utility ) 1 selects two large primes p and q, 2 forms the product n = pq, 3 computes φ(n), 4 selects integer e such that gcd(e, φ(n)) = 1, 5 finds the multiplicative inverse d of e (mod φ(n)), 6 private key is d, public key is (e, n). 1 let p = 1009 and q = n = Remark: only the Key Utility knows p and q. 3 φ( ) = (1009 1)(2003 1) = e = 1003 (for example) 5 d = (for this e) 6 private key is , public key is (1003, ).

63 Exchanging Messages Suppose Alice and Bob have the following keys. Key Holder Public Key Private Key Alice (e a, n a ) = (1003, ) d a = Bob (e b, n b ) = (10007, ) d b =

64 Exchanging Messages Suppose Alice and Bob have the following keys. Key Holder Public Key Private Key Alice (e a, n a ) = (1003, ) d a = Bob (e b, n b ) = (10007, ) d b = Private key d a is known only to Alice (and the Key Utility), while private key d b is known only to Bob (and the Key Utility).

65 Exchanging Messages Suppose Alice and Bob have the following keys. Key Holder Public Key Private Key Alice (e a, n a ) = (1003, ) d a = Bob (e b, n b ) = (10007, ) d b = Private key d a is known only to Alice (and the Key Utility), while private key d b is known only to Bob (and the Key Utility). If Alice wants to send the message hi to Bob, she looks up Bob s public key (e b, n b ) and must do two things.

66 Encrypting Using RSA 1 Alice converts hi to a number, m. Letter h i ASCII Code m =

67 Encrypting Using RSA 1 Alice converts hi to a number, m. Letter h i ASCII Code m = Alice creates the ciphertext c using the formula c m e b (mod n b ) c = (mod ) c = and sends it to Bob. Alice can try this Java applet if she needs help with modular exponentiation.

68 Encrypting Using RSA 1 Alice converts hi to a number, m. Letter h i ASCII Code m = Alice creates the ciphertext c using the formula c m e b (mod n b ) c = (mod ) c = and sends it to Bob. Alice can try this Java applet if she needs help with modular exponentiation. Remark: if m > n b Alice breaks the m into chunks smaller than n b.

69 Bob Decrypts the Ciphertext When Bob receives the ciphertext c he uses his private key d b and computes m c d b (mod n b ) m = (mod ) m =

70 Bob Decrypts the Ciphertext When Bob receives the ciphertext c he uses his private key d b and computes m c d b (mod n b ) m = (mod ) m = ASCII Code Letter h i

71 Is RSA Secure? The security of RSA depends on the difficulty in factoring large numbers like n.

72 Is RSA Secure? The security of RSA depends on the difficulty in factoring large numbers like n. If n = pq where p and q are prime numbers with more than 500 digits each then n has more than 1000 digits.

73 Is RSA Secure? The security of RSA depends on the difficulty in factoring large numbers like n. If n = pq where p and q are prime numbers with more than 500 digits each then n has more than 1000 digits. It takes approximately years to factor a 500-digit composite number using today s computers.

74 Is RSA Secure? The security of RSA depends on the difficulty in factoring large numbers like n. If n = pq where p and q are prime numbers with more than 500 digits each then n has more than 1000 digits. It takes approximately years to factor a 500-digit composite number using today s computers. As computers get faster, we can keep increasing n.

75 Will We Run Out of Primes? Theorem There are infinitely many prime numbers.

76 Will We Run Out of Primes? Theorem There are infinitely many prime numbers. Proof. Suppose there are only finitely many primes p 1 < p 2 < < p k.

77 Will We Run Out of Primes? Theorem There are infinitely many prime numbers. Proof. Suppose there are only finitely many primes p 1 < p 2 < < p k. Form the number q = (p 1 )(p 2 ) (p k ) + 1 > p k. This number is either prime or composite.

78 Will We Run Out of Primes? Theorem There are infinitely many prime numbers. Proof. Suppose there are only finitely many primes p 1 < p 2 < < p k. Form the number q = (p 1 )(p 2 ) (p k ) + 1 > p k. This number is either prime or composite. 1 q (mod p i )

79 Will We Run Out of Primes? Theorem There are infinitely many prime numbers. Proof. Suppose there are only finitely many primes p 1 < p 2 < < p k. Form the number q = (p 1 )(p 2 ) (p k ) + 1 > p k. This number is either prime or composite. 1 q (mod p i ) No (known) prime evenly divides q.

80 Will We Run Out of Primes? Theorem There are infinitely many prime numbers. Proof. Suppose there are only finitely many primes p 1 < p 2 < < p k. Form the number q = (p 1 )(p 2 ) (p k ) + 1 > p k. This number is either prime or composite. 1 q (mod p i ) No (known) prime evenly divides q. Either q itself is prime or there is a prime larger than p k which divides q.

81 Where Can You Learn More? The modern language of cryptology is mathematics. Major in mathematics in college. Take a course in number theory. The National Security Agency employs and educates cryptologists. The National Cryptologic Museum has exhibits on ancient and modern cryptography.