Hey everyone! I'm @lemony-cricket. In <a href="https://steemit.com/steemstem/@lemony-cricket/introduction-to-cryptography-i-encryption-pt-1-the-caesar-cipher">the inaugural installment</a> of Introduction to Cryptography, we laid down some of the basic building blocks of understanding encryption. We learned about <b>encryption</b> and <b>decryption</b>, <b>plaintext</b> and <b>ciphertext</b>, and what a <b>key</b> is. In this installment, we'll be learning about <strong>one-time pads</strong> and a little bit about modern <strong>stream ciphers</strong>.

This is the second post in this series. The next post is [here](https://steemit.com/steemstem/@lemony-cricket/introductiontocryptographyiencryptionsalsa20streamcipher-62e89vfmol).

<hr />
<center>
<img src="https://steemitimages.com/0x0/https://ipfs.busy.org/ipfs/QmWCJf8qvND9DqsPoZUZzxEgT8UY7YJzn4a1CBPXQ5BCCa" /><br>
<sup>Rocket graphic extracted from <a title="This link will take you away from steemit.com" href="https://pixabay.com/en/planet-rocket-space-stars-1297860" rel="noopener">this CC0 image</a> from <a title="This link will take you away from steemit.com" href="https://pixabay.com/en/users/OpenClipart-Vectors-30363/" rel="noopener">OpenClipart-Vectors on Pixabay</a>.</sup>
</center>
<hr />

<h1>Retrospective</h1>
<p><strong>First, before we begin</strong>, I'd like to extend gratitude to @bachuslib, @svemirac, @insaneworks, @warpedpoetic, @kex, and @enjar for their participation in the interactive portion last time. Full marks, all of you! All participants successfully encrypted a message using the Caesar shift algorithm and received an encrypted reply from me using the same key.</p>

<p><strong>But how did I know your key</strong> if you didn't tell me? The answer may be obvious to some of you at this point, but if you're still wondering...</p>

<p><strong>The Caesar cipher has an extremely small </strong>𝕜𝕖𝕪𝕤𝕡𝕒𝕔𝕖<sup><sup>d1</sup></sup>. This means it is <em>incredibly</em> weak when faced with a simple 𝕓𝕣𝕦𝕥𝕖-𝕗𝕠𝕣𝕔𝕖 𝕒𝕥𝕥𝕒𝕔𝕜<sup><sup>d2</sup></sup>. Since there are only 26 letters in the English alphabet, I only had to try to decrypt your message 26 times, one for each possible offset. Once I got something that made sense, I knew I had found the "secret" key.</p>
<p><blockquote>But that's cheating!</blockquote></p>

<p><strong>Not really. </strong>In matters of cryptography and security, <em>nothing</em> is cheating. Besides, it made for a very nice introduction to extremely basic 𝕔𝕣𝕪𝕡𝕥𝕒𝕟𝕒𝕝𝕪𝕤𝕚𝕤<sup><sup>d3</sup></sup>, the "cat" from which cryptography's "mouse" is perpetually running.</p>

<p><strong>For every good person</strong> out there who needs cryptographic protection, there is a <strong>bad person</strong> trying to defeat it. For every <strong>bad person</strong> using cryptography for evil, there is a <strong>good person</strong> trying to catch them. In this way, cryptography and cryptanalysis go hand-in-hand to bring balance to a chaotic world. This is just the way that things are.</p>

<hr />

<h1>The one-time pad</h1>
<sup>unbreakable but cumbersome security</sup>
<br>
<p><strong>One way to ensure</strong> that your data is safe is to use a <em>one-time pad</em>. We'll find out what that means in a moment. First, let's assume Alice and Bob are two friends who are currently together in a safe location, away from prying eyes. Bob is going on a trip soon, and Alice wants to be able to send him a secret message while he is away.</p>

<p><strong>The first thing they will do</strong> is generate the key. With a one-time pad, the key has to be very large; at least as large as the message you wish to send! Alice and Bob decide that the message will be small; no longer than 2 or 3 words. They decide that 20 letters will be enough. They use <a href="https://random.org">RANDOM.ORG</a> to generate 20 numbers from 0 to 25...</p>

```
20	21	11	7	14
10	4	4	22	22
17	9	7	25	22
14	0	15	12	1
```
<p><strong>Each keeps a copy of the numbers</strong> and they part ways<strong>. </strong>A week later, Alice writes her message to Bob:</p>

```
I MISS YOU
```
<p><strong>Alice encrypts each letter of this message </strong>using the rules of the Caesar shift we learned before, but with a catch: every letter uses a different shift value, taken in order from the one-time pad (from left to right):</p>

```
I -=20=-> C
M -=21=-> H
I -=11=-> T
S -=07=-> Z
S -=14=-> G
Y -=10=-> I
O -=04=-> S
U -=04=-> Y
```
```
C HTZG ISY
```
<p><strong>When Bob receives the message, </strong>he can just perform the decryptions with the same keys in the same order, and he will get the original message back.</p>

<p><strong>One-time pads</strong> are an example of 𝕚𝕟𝕗𝕠𝕣𝕞𝕒𝕥𝕚𝕠𝕟-𝕥𝕙𝕖𝕠𝕣𝕖𝕥𝕚𝕔 𝕤𝕖𝕔𝕦𝕣𝕚𝕥𝕪<sup><sup>d4</sup></sup>.</em> This means that they are <em>proven</em> to be uncrackable, as without having the key, you actually have <em>no information whatsoever</em> about the plaintext<sup><sup>r1</sup></sup>. I am using spaces in these exercises for readability, but in a real-world application, we would be encrypting the spaces too, and they'd get lost in the jumble.</p>

<p><strong>So this is great, right?</strong> It's a start. There are a few problems with one-time pads:
<ul>
 	<li>The key must be at least as long as the plaintext.</li>
 	<li>Once a part of the key is used, it should <em>never</em> be re-used again. This would expose the key to a <em>reused key attack</em><sup><sup>r2</sup></sup>.</li>
 	<li>The key(s) must be generated in full and, once depleted, there is no way to generate more except to meet up again.</li>
</ul></p>
<h1>Introducing stream ciphers</h1>
<sup>they're like an (almost) infinite one-time-pad</sup><br>

<p><strong>A stream cipher is an extension</strong> of the one-time pad concept. The main logic of a stream cipher is focused upon generating a never-ending stream of 𝕡𝕤𝕖𝕦𝕕𝕠𝕣𝕒𝕟𝕕𝕠𝕞<sup><sup>d5</sup></sup> data called the 𝕜𝕖𝕪𝕤𝕥𝕣𝕖𝕒𝕞<sup><sup>d6</sup></sup>. This keystream then acts as a one-time pad which is much easier to store and transmit, since it is generated from a much smaller key using a publicly-known algorithm.</p>

<p><strong>In the above example,</strong> we used a modified Caesar shift algorithm<strong> with each letter consuming a separate key from the keystream. </strong>In practice, most modern stream cipher implementations operate on individual bits of data and use the 𝕖𝕩𝕔𝕝𝕦𝕤𝕚𝕧𝕖 𝕆ℝ<sup><sup>d7</sup></sup> (XOR) operation for this purpose, as it is fast, universally available, and the decryption operation is actually the same as for encryption! (We will discuss this all in more detail in the next installment.)</p>

<p><blockquote>Well, it can't be <em>all</em> good news. There has to be a catch.</blockquote></p>

<p><strong>There is,</strong> sort of. Since the keystream must be 𝕕𝕖𝕥𝕖𝕣𝕞𝕚𝕟𝕚𝕤𝕥𝕚𝕔<sup><sup>d8</sup></sup>, it cannot possibly be truly random. Therefore, there is a risk some weakness could be discovered in the algorithm which could lead to a practical attack on the cipher. In addition, with the decrease in key size, the keyspace is also decreased, making brute-force and other attacks marginally easier. In general, though, the benefits (which are tangible and tested) outweigh the disadvantages by far (which are theoretical and unlikely).</p>

<p><strong>Next time,</strong> we'll be taking a closer look at a specific stream cipher in order to understand how the keystream is generated. We'll also look at some more complicated attacks.</p>

<hr />

<h1>Interactive exercise</h1>
<sup>You should have paper and something to write with for this portion.</sup><br>

<p><strong>Your name is</strong> <strong>Evelyn</strong>, and you've been trying to get between Alice and Bob for a while now. You've followed Bob to his destination and snuck into his hotel room while he's out running an errand.</p>

<p><strong>You see a note on the desk.</strong> You can't believe your eyes; Bob has left his notes out on the table. Alice always was the more careful one.</p>

```
20	21	11	7	14
10	4	4	22	22
17	9	7	25	22
14	0	15	12	1
```

```
C HTZG ISY
```
<p><strong>What's more,</strong> Bob has carelessly written <em>his</em> copy of the key in pencil. This is it! The moment you've been waiting for.</p>

<p><strong>Hurry! Before Bob gets back!</strong> Change the <em>key</em> so that the message written reflects a malicious message. Then, leave the new key in the comment section below. You can go for the obvious choice, or get a bit creative. The choice is yours!&nbsp;🍋</p>

<hr />

<h1>Definitions</h1>
<sup>From my personal knowledge and experience unless otherwise noted.</sup>
<br>
<ol>
 	<li><strong>keyspace</strong>: this is the number of total possible keys that exist. If you have a 256-bit key, and all possible values are valid, then there are 2<sup>256</sup> possible keys. </li>
 	<li><strong>brute-force attack</strong>: the attempt to try every single possible key (to search the entire keyspace) to find the valid key. While trivial for small keyspaces such as that of the Caesar shift, it quickly becomes impractical and at some point even almost certainly impossible.</li>
 	<li><strong>cryptanalysis</strong>: the science of attempting to break cryptographic systems, especially encryption.</li>
 	<li><strong>information-theoretic security</strong>: <blockquote>a cryptosystem whose security derives purely from information theory. In other words, it cannot be broken even if the adversary had unlimited computing power.<sup><sup>r3</sup></sup></blockquote></li>
 	<li><strong>pseudorandom</strong>: describes a collection of apparently random data which is actually generated by an algorithm in a <b>deterministic</b> manner.</li>
 	<li><strong>keystream</strong>: a continuous, (apparently) randomised stream of data which can be combined in some way (usually XOR) with the plaintext (to encrypt) or ciphertext (to decrypt).</li>
 	<li><strong>exclusive OR</strong>: a bitwise logic operator which returns true (1) if and only if exactly one of the inputs is true (1). For example, the result of XORing <code>1100</code> with <code>1010</code> is <code>0110</code>. We'll see more about this in the next installment.</li>
 	<li><strong>deterministic</strong>: describes an algorithm and an outcome which is repeatable in all cases if the same exact input is provided to the system.</li>
</ol>
<hr>
<h1>References</h1>
<ol>
<li>https://en.wikipedia.org/wiki/One-time_pad#Perfect_secrecy</li>
<li>https://en.wikipedia.org/wiki/Stream_cipher_attacks#Reused_key_attack</li>
<li>https://en.wikipedia.org/wiki/Information-theoretic_security</li>
</ol><br /><center><hr/><em>Posted from my blog with <a href='https://wordpress.org/plugins/steempress/'>SteemPress</a> : https://lemony.cricket/2018/06/12/introduction-to-cryptography-i-encryption-pt-2-one-time-pads-and-stream-cipher-intro/</em><hr/></center>