Encryption: Symmetric and Asymmetric

1. Why Encryption Is Needed

When data travels across a network, it passes through equipment you do not own and cannot control. Anyone who can access that path can intercept the data as it passes. Encryption does not stop interception — it makes the intercepted data meaningless to whoever takes it.

The key idea: Encryption cannot prevent data from being stolen. Its purpose is to make stolen data useless to the person who steals it.

Data sent without encryption is sent as plaintext, which is directly readable. This is why encryption is essential whenever the following are transmitted:

  • Passwords and login details
  • Bank and payment card details
  • Personal data such as medical or school records
  • Confidential business communications

2. Key Terms

These four terms are used throughout the topic, and marks are frequently lost by mixing them up.

Term Meaning
Plaintext The original data before encryption. Readable and understandable.
Ciphertext The data after encryption. Scrambled and not understandable.
Encryption algorithm The process (or cypher) applied to the plaintext to scramble it.
Key A value used by the algorithm to encrypt and decrypt the data.
Plaintext → encryption algorithm + key → Ciphertext
Ciphertext → decryption algorithm + key → Plaintext

3. Symmetric Encryption

In symmetric encryption, the same key is used to both encrypt and decrypt the data. This single key is often called the secret key or private key.

How it works

Sender Receiver ------ -------- plaintext + SECRET KEY --> ciphertext --[network]--> ciphertext + SAME SECRET KEY --> plaintext

Because both parties need the identical key, the key itself has to reach the receiver somehow. This creates the central weakness of symmetric encryption.

The key distribution problem

If the secret key is sent across the same network as the data, it can be intercepted too. An interceptor who obtains the key can decrypt every message. Sending the key securely is therefore as difficult as sending the data securely in the first place.

Advantages Disadvantages
Faster, because the algorithm is less complex The key must be shared with the receiver, so it can be intercepted
Requires less processing power Every pair of communicating parties needs its own key, so large numbers of keys must be managed

4. Asymmetric Encryption

Asymmetric encryption solves the key distribution problem by using two different but mathematically related keys, known as a key pair.

Key Who has it What it does
Public key Given out freely to anyone Used to encrypt the data
Private key Kept secret by the owner, never shared Used to decrypt the data
The crucial property: data encrypted with a public key can only be decrypted using the matching private key. The public key cannot decrypt what it has just encrypted.

How it works

Suppose Amira wants to send confidential data to Ben:

  1. Ben generates a key pair: a public key and a private key.
  2. Ben sends his public key to Amira. It does not matter if this is intercepted.
  3. Amira encrypts her plaintext using Ben's public key, producing ciphertext.
  4. Amira transmits the ciphertext to Ben.
  5. Ben decrypts the ciphertext using his private key, which has never been transmitted.
Amira Ben ----- --- <--- BEN'S PUBLIC KEY ----------- (key pair generated) plaintext + BEN'S PUBLIC KEY --> ciphertext ---------> ciphertext + BEN'S PRIVATE KEY --> plaintext

An interceptor can capture both the public key and the ciphertext and still cannot read the data, because the private key was never sent across the network.

Advantages Disadvantages
The private key is never transmitted, so it cannot be intercepted Slower, because the algorithm is more complex
More secure than symmetric encryption Requires more processing power

5. Comparing the Two Methods

Feature Symmetric Asymmetric
Number of keys One key Two keys (a key pair)
Key used to encrypt Secret key Public key
Key used to decrypt The same secret key Private key
Is a key transmitted? Yes — the secret key must be shared Only the public key, which is not secret
Speed Faster Slower
Security Lower — key can be intercepted Higher — private key never sent

6. Exam Focus

Do not write that encryption “stops” or “prevents” data being stolen or hacked. It does not. Encryption makes intercepted data unreadable or meaningless. Answers claiming encryption prevents interception are not credited.
Name the key precisely. In asymmetric encryption the public key encrypts and the private key decrypts. Writing “the key” without saying which one, or swapping the two around, loses the mark. Note also that the single key in symmetric encryption is sometimes called a “private key” — read the question carefully to see which system is being described.
Use the correct terms for the data. Before encryption it is plaintext; after encryption it is ciphertext. Describing ciphertext as “encrypted plaintext” is imprecise.

Quick self-check

  • State the purpose of encryption — not what it prevents, but what it achieves.
  • Explain why symmetric encryption is less secure when data is sent over the internet.
  • Describe, in order, the five steps by which Amira sends encrypted data to Ben.
  • Explain why an intercepted public key is not a security risk.