{"id":3797,"date":"2021-01-19T01:40:57","date_gmt":"2021-01-19T09:40:57","guid":{"rendered":"https:\/\/cheapsslsecurity.com\/blog\/?p=3797"},"modified":"2021-07-20T23:14:32","modified_gmt":"2021-07-21T07:14:32","slug":"what-is-asymmetric-encryption-understand-with-simple-examples","status":"publish","type":"post","link":"https:\/\/cheapsslsecurity.com\/blog\/what-is-asymmetric-encryption-understand-with-simple-examples\/","title":{"rendered":"What is Asymmetric Encryption? Understand with Simple Examples"},"content":{"rendered":"\n

Learn what asymmetric encryption is, how it works, and what it does<\/h2>\n\n\n\n

When it comes to the word \u2018Encryption<\/strong><\/em>,\u2019 we think of it as a technique that protects data using a cryptographic key, and there’s nothing wrong with this. However, what most people don’t realize is that there are different types of encryption methods. Asymmetric Encryption, also known as Public-Key Cryptography, is an example of one type.<\/p>\n\n\n\n

Unlike \u201cnormal\u201d (symmetric) encryption<\/strong>, Asymmetric Encryption encrypts and decrypts the data using two separate yet mathematically connected cryptographic keys. These keys are known as a \u2018Public Key<\/strong>\u2019 and a \u2018Private Key<\/strong>.\u2019 Together, they\u2019re called a \u2018Public and Private Key Pair.\u2019<\/p>\n\n\n\n

Let\u2019s see how these two keys work together to create the formidable force that is Asymmetric Encryption.<\/p>\n\n\n\n

How does Asymmetric Encryption work?<\/h2>\n\n\n\n

Asymmetric Encryption<\/strong> uses two distinct, yet related keys. One key, the Public Key, is used for encryption and the other, the Private Key, is for decryption. As implied in the name, the Private Key is intended to be private so that only the authenticated recipient can decrypt the message.<\/p>\n\n\n\n

Let\u2019s understand this with a simple asymmetric encryption example<\/strong>.<\/p>\n\n\n\n

Pretend you\u2019re a spy agency and you need to devise a mechanism for your agents to report in securely. You don\u2019t need two-way communication, they have their orders, you just need regular detailed reports coming in from them. Asymmetric encryption would allow you to create public keys for the agents to encrypt their information and a private key back at headquarters that is the only way to decrypt it all. This provides an impenetrable form of one-way communication.<\/p>\n\n\n\n

\"asymmetric<\/figure><\/div>\n\n\n\n

How are the two keys generated?<\/h2>\n\n\n\n

At the heart of Asymmetric Encryption<\/strong> lies a cryptographic algorithm. This algorithm uses a key generation protocol (a kind of mathematical function) to generate a key pair. Both the keys are mathematically connected with each other. This relationship between the keys differs from one algorithm to another.<\/p>\n\n\n\n

The algorithm is basically a combination of two functions \u2013 encryption function and decryption function<\/strong>. To state the obvious, the encryption function encrypts the data and decryption function decrypts it.<\/p>\n\n\n\n

This is how Asymmetric Encryption is used in SSL\/TLS certificates<\/h2>\n\n\n\n

In SSL\/TLS and other digital certificates<\/strong>, both methods \u2013 Symmetric and Asymmetric \u2013 are employed.<\/a> Now, you might be wondering, \u2018Why both? Shouldn\u2019t Asymmetric cryptography be used as it\u2019s more secure?\u2019 Granted, it is more secure, but it comes with a pitfall. A major drawback when it comes to Public Key Cryptography<\/strong> is the computational time. As the verification and functions are applied from both the sides, it slows down the process significantly. That\u2019s where Symmetric Encryption comes and saves the day.<\/p>\n\n\n\n

First, when two parties (browser and server in the case of SSL) come across each other, they validate each other’s private and public key through Asymmetric Encryption. Once the verification is successful and both know whom they’re talking to, the encryption of the data starts \u2013 through Symmetric Encryption. Thereby saving significant time and serving the purposes of confidentiality and data-protection. This entire process is called an SSL\/TLS handshake. If you want to learn more about this handshake, here\u2019s an excellent post for you.<\/a><\/p>\n\n\n\n

Difference between Symmetric and Asymmetric Encryption<\/h2>\n\n\n\n
Symmetric Encryption<\/td>Asymmetric Encryption<\/td><\/tr>
Symmetric encryption consists of one of key for encryption and decryption.<\/td>Asymmetric Encryption consists of two cryptographic keys known as Public Key and Private Key.<\/td><\/tr>
Symmetric Encryption is a lot quicker compared to the Asymmetric method.<\/td>As Asymmetric Encryption incorporates two separate keys, the process is slowed down considerably.<\/td><\/tr>
RC4<\/td>RSA<\/td><\/tr>
AES<\/td>Diffie-Hellman<\/td><\/tr>
DES<\/td>ECC<\/td><\/tr>
3DES<\/td>El Gamal<\/td><\/tr>
QUAD<\/td>DSA<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

You\u2019re using Asymmetric Encryption without even realizing it<\/h2>\n\n\n\n

When you visit any HTTPS website\/webpage, your browser establishes Asymmetrically encrypted connection with that website. Your browser automatically derives the public key of the SSL\/TLS certificate installed on the website (that\u2019s why it\u2019s called \u2018Public Key\u2019). Do you want to see what it looks like? Click the green padlock you see in front of our URL, and go to certificate details. This is how it\u2019ll look like:<\/p>\n\n\n\n

30 82 01 0a 02 82 01 01 00 c2 d8 be ec a4 e1 52 20 7f 7f 7d 1a 17 38 99 17 ef 6a 9e af 66 89 67 5a 58 e2 b8 7c 76 f2 b8 c6 8f 98 e4 06 eb 3c 1c 04 34 1e 10 a9 42 c2 34 be 99 3b 98 7b 35 60 3a d5 41 bb 96 19 1a 3c 66 a0 75 77 64 2a 2e 19 42 5a b1 d0 1f 4d ac 32 2e af 4e 20 b8 89 07 83 51 21 e4 35 02 4b 10 45 03 37 ce 26 87 e0 b8 4d dc ba c5 e7 ae 60 68 b3 0c a3 5c 4f dd 30 1f 95 96 a5 2e e5 6f ae e8 e2 dc df 3a ab 51 74 82 f5 9e 15 3a ab 7c 99 3c 07 5b ad f2 88 a2 23 1c cd 41 d8 66 a4 90 0d 4a 23 05 5c de aa e3 82 13 f4 08 87 b3 34 08 6f 38 fb f8 84 ec 06 99 e0 ab 8a ab 1b 7c 99 fd 57 94 67 17 15 b7 27 67 c1 bc d1 a7 f6 c6 7e 01 63 02 0c 03 c4 bb 1f 70 0d db 27 ab 79 57 d9 92 35 f3 92 3c ad f4 fb f0 36 82 33 5a a0 f9 82 78 04 a6 e7 d6 ee 01 23 68 36 68 3b 41 fe 68 56 0b 6b 36 3b 83 b1 02 03 01 00 01<\/p><\/blockquote>\n\n\n\n

Amazing isn\u2019t it?<\/p>\n\n\n\n

So, this key encrypts any information you send to our website during the initial handshake, and our Private Key will decrypt it. Do you want to see what our Private Key looks like? Here it is:<\/p>\n\n\n\n

\"private<\/figure><\/div>\n\n\n\n

Oh wait, that\u2019s the key to our office. Did we tell you that the Private Key is supposed to be \u201cPrivate?\u201d Yes, you should NEVER EVER give it to anyone and keep it close to your chest (not literally). We recommend storing it at a location where only authorized people have access to it. If possible, you should try and save it on a hardware device that’s not connected to your system all the time.<\/p>\n\n\n

Asymmetric Encryption Example<\/h3>\n

The most well-known example of Asymmetric Encryption is the Digital Signature Algorithm (DSA). Developed by National Institute of Standards and Technology (NIST) in 1991, DSA is used for digital signature and its verification. DSA is an example of asymmetric encryption based on modular exponentiation and discrete logarithm.<\/p>\n\n\n

Concluding Words About Asymmetric Cryptography<\/h2>\n\n\n\n

Still here? Good. We believe that now you (hopefully) know what Asymmetric Encryption is and how it protects you from the wrath of cybercriminals. If you have a website and want to protect it with the same technology.<\/p>\n\n\n\n

Related Resources<\/h2>\n\n\n\n