- History of cryptography
The history of
cryptography begins thousands of years ago. Until recent decades, it has been the story of what might be called classic cryptography — that is, of methods ofencryption that use pen and paper, or perhaps simple mechanical aids. In the early20th century , the invention of complex mechanical and electromechanicalmachine s, such as the Enigmarotor machine , provided more sophisticated and efficient means of encryption; and the subsequent introduction ofelectronics andcomputing has allowed elaborate schemes of still greater complexity, most of which are entirely unsuited to pen and paper.The development of
cryptography has been paralleled by the development ofcryptanalysis — of the "breaking" ofcode s andcipher s. The discovery and application, early on, offrequency analysis to the reading of encrypted communications has on occasion altered the course of history. Thus theZimmermann Telegram triggered theUnited States ' entry intoWorld War I ; andAllied reading ofNazi Germany 's ciphers shortenedWorld War II , in some evaluations by as much as two years.Until the
1970 s, secure cryptography was largely the preserve ofgovernment s. Two events have since brought it squarely into the public domain: the creation of a public encryption standard (DES); and the invention ofpublic-key cryptography .Classical cryptography
The earliest known use of cryptography is found in non-standard hieroglyphs carved into monuments from
Egypt 's Old Kingdom (ca 4500+ years ago). These are not thought to be serious attempts at secret communications, however, but rather to have been attempts at mystery, intrigue, or even amusement for literate onlookers. These are examples of still other uses of cryptography, or of something that looks (impressively if misleadingly) like it. Some clay tablets from Mesopotamia, somewhat later are clearly meant to protect information — they encrypt recipes, presumably commercially valuable. Later still, Hebrew scholars made use of simple monoalphabeticsubstitution ciphers (such as theAtbash cipher ) beginning perhaps around 500 to 600 BC.Cryptography has a long tradition in religious writing likely to offend the dominant culture or political authorities. Perhaps the most famous is the 'Number of the Beast' from the
Book of Revelation in the ChristianNew Testament . '666' might be a cryptographic (i.e., encrypted) way of concealing a dangerous reference; many scholars believe it's a concealed reference to theRoman Empire , or more likely to the Emperor Nero himself, (and so to Roman persecution policies) that would have been understood by the initiated (who 'had the key to understanding'), and yet be safe or at least deniable (and so 'less' dangerous) if it came to the attention of the authorities. At least for orthodox Christian writing, most of the need for such concealment ended with Constantine's conversion and the adoption of Christianity as the official religion of the Empire.The Greeks of Classical times are said to have known of ciphers (e.g., the
scytale transposition cipher claimed to have been used by the Spartan military). Herodotus tells us of secret messages physically concealed beneath wax on wooden tablets or as a tattoo on a slave's head concealed by regrown hair, though these are not properly examples of cryptography per se as the message, once known, is directly readable; this is known assteganography . The Romans certainly did know something of cryptography (e.g., theCaesar cipher and its variations). There is ancient mention of a book about Roman military cryptography (especiallyJulius Caesar 's); it has been, unfortunately, lost.In
India , cryptography was also well known. It is recommended in theKama Sutra as a technique by which lovers can communicate without being discovered.Medieval cryptography
[
al-Kindi 's manuscript "On Deciphering Cryptographic Messages", containing the first descriptions ofcryptanalysis andfrequency analysis .]It was probably religiously motivated textual analysis of the
Qur'an which led to the invention of thefrequency analysis technique for breaking monoalphabeticsubstitution cipher s byal-Kindi sometime around AD 800 (Ibrahim Al-Kadi -1992). It was the most fundamental cryptanalytic advance until WWII. Essentially all ciphers remained vulnerable to this cryptanalytic technique until the development of thepolyalphabetic cipher by Alberti (ca 1465), and many remained so thereafter.Fact|date=February 2007 Although Alberti is usually considered the father of polyalphabetic cipher, Prof. Al-Kadi's 1990 paper (ref- 3), reviewing Arabic contributions to cryptography reported knowledge of polyalphabetic ciphers 500 years before Alberti, based on a recently discovered manuscript by al-Kindi.The Arab mathematician, Abu Yusuf Yaqub ibn Ishaq ibn as-Sabbah ibn 'Omran ibn Ismail al-Kindi, wrote a book on crytography entitled "Risalah fi Istikhraj al-Mu'amma" ("Manuscript for the Deciphering Cryptographic Messages"), circa AD 800. He described the first
cryptanalysis techniques, including some for polyalphabetic ciphers, cipher classification, Arabic Phonetics and Syntax, and, most importantly, described the use of several techniques for cryptanalysis, and gave the first descriptions onfrequency analysis . [Simon Singh, "The Code Book", pp. 14-20] He also covered methods of encipherments, cryptanalysis of certain encipherments, and statistical analysis of letters and letter combinations in Arabic. [cite web |url=http://www.muslimheritage.com/topics/default.cfm?ArticleID=372 |title= Al-Kindi, Cryptgraphy, Codebreaking and Ciphers |accessdate=2007-01-12 |format= HTML |work= ]Ahmad al-Qalqashandi (1355-1418) wrote the "Subh al-a 'sha", a 14-volume encyclopedia which included a section on cryptology. This information was attributed to Taj ad-Din Ali ibn ad-Duraihim ben Muhammad ath-Tha 'alibi al-Mausili who lived from 1312 to 1361, but whose writings on cryptography have been lost. The list of ciphers in this work included both substitution and transposition, and for the first time, a cipher with multiple substitutions for eachplaintext letter. Also traced to Ibn al-Duraihim is an exposition on and worked example of cryptanalysis, including the use of tables ofletter frequencies and sets of letters which can not occur together in one word.In Europe, cryptography became (secretly) more important as a consequence of political competition and religious revolution. For instance, in Europe during and after the
Renaissance , citizens of the various Italian states — thePapal States and theRoman Catholic Church included — were responsible for rapid proliferation of cryptographic techniques, few of which reflect understanding (or even knowledge) of Alberti's polyalphabetic advance. 'Advanced ciphers', even after Alberti, weren't as advanced as their inventors / developers / users claimed (and probably even themselves believed). They were regularly broken. This over-optimism may be inherent in cryptography for it was then, and remains today, fundamentally difficult to accurately know how vulnerable your system actually is. In the absence of knowledge, guesses and hopes, as may be expected, are common.Cryptography,
cryptanalysis , and secret agent/courier betrayal featured in theBabington plot during the reign of Queen Elizabeth I which led to the execution of Mary, Queen of Scots. An encrypted message from the time of theMan in the Iron Mask (decrypted just prior to 1900 byÉtienne Bazeries ) has shed some, regrettably non-definitive, light on the identity of that real, if legendary and unfortunate, prisoner. Cryptography, and its misuse, were involved in the plotting which led to the execution ofMata Hari and in the conniving which led to the travesty of Dreyfus' conviction and imprisonment, both in the early20th century . Fortunately, cryptographers were also involved in exposing the machinations which had led to Dreyfus' problems; Mata Hari, in contrast, was shot.Outside of Europe, after the end of the Muslim Golden Age at the hand of the Mongols, cryptography remained comparatively undeveloped.
Cryptography in Japan seems not to have been used until about 1510, and advanced techniques were not known until after the opening of the country to the West beginning in the1860s . During the 1920s, it was Polish naval officers who assisted the Japanese military with code and cipher development.See also:
Voynich Manuscript
= Cryptography from 1800 to World War II = main|World War I cryptographyAlthough cryptography has a long and complex history, it wasn't until the
19th century that it developed anything more than ad hoc approaches to either encryption orcryptanalysis (the science of finding weaknesses in crypto systems). Examples of the latter includeCharles Babbage 'sCrimean War era work on mathematical cryptanalysis ofpolyalphabetic cipher s, redeveloped and published somewhat later by the PrussianFriedrich Kasiski . Understanding of cryptography at this time typically consisted of hard-won rules of thumb; see, for example,Auguste Kerckhoffs ' cryptographic writings in the latter 19th century.Edgar Allan Poe used systematic methods to solve ciphers in the1840s . In particular he placed a notice of his abilities in thePhiladelphia paper "Alexander's Weekly (Express) Messenger", inviting submissions ofcipher s, of which he proceeded to solve almost all. His success created a public stir for some months. [Silverman, Kenneth. "Edgar A. Poe: Mournful and Never-ending Remembrance". New York: Harper Perennial, 1991. p. 152-3] He later wrote an essay on methods of cryptography which proved useful as an introduction for noviceRoom 40 British cryptanalysts attempting to break German codes and ciphers duringWorld War I , and a famous story, "The Gold Bug", in which cryptanalysis was a prominent element.In 1917,
Gilbert Vernam proposed a teletype cipher in which a previously-prepared key, kept on paper tape, is combined character by character with the plaintext message to produce the cyphertext. This led to the development of theone time pad and to the use of electromechanical devices as cipher machines.Mathematical methods proliferated in the period prior to
World War II (notably inWilliam F. Friedman 's application of statistical techniques to cryptanalysis and cipher development and inMarian Rejewski 's initial break into the German Army's version of the Enigma system) in 1932.Both cryptography and cryptanalysis have become far more mathematical since WWII. Even so, it has taken the wide availability of computers, and the
Internet as a communications medium, to bring effective cryptography into common use by anyone other than national governments or similarly large enterprises.
= World War II cryptography = main|World War II cryptographyByWorld War II , mechanical and electromechanical cipher machines were in wide use, although — where such machines were impractical — manual systems continued in use. Great advances were made in both cipher design andcryptanalysis , all in secrecy. Information about this period has begun to be declassified as the official British 50-year secrecy period has come to an end, as U.S. archives have slowly opened, and as assorted memoirs and articles have appeared.The Germans made heavy use, in several variants, of an electromechanical
rotor machine known as Enigma. MathematicianMarian Rejewski , atPoland 's Cipher Bureau, inDecember 1932 deduced the detailed structure of the German Army Enigma, using mathematics and limited documentation supplied by CaptainGustave Bertrand of Frenchmilitary intelligence . This was the greatest breakthrough in cryptanalysis in a thousand years and more, according to historian David Kahn. Rejewski and his mathematical Cipher Bureau colleagues,Jerzy Różycki andHenryk Zygalski , continued reading Enigma and keeping pace with the evolution of the German Army machine's components and encipherment procedures. As the Poles' resources became strained by the changes being introduced by the Germans, and as war loomed, the Cipher Bureau, on the PolishGeneral Staff 's instructions, onJuly 25 ,1939 , atWarsaw , initiated French and British intelligence representatives into the secrets of Enigma decryption.Soon after
World War II broke out on1 September ,1939 , key Cipher Bureau personnel were evacuated southeastward; onSeptember 17 , as theSoviet Union entered eastern Poland, they crossed intoRomania . From there they reachedParis ,France ; atPC Bruno , near Paris, they continued breaking Enigma, collaborating with Britishcryptologist s atBletchley Park as the British got up to speed on breaking Enigma. In due course, the British cryptographers — whose ranks included many chess masters and mathematics dons such asGordon Welchman ,Max Newman , andAlan Turing the conceptual founder of modern computing — substantially advanced the scale and technology of Enigmadecryption .At the end of the War, on
19 April ,1945 , Britain's top military officers were told that they could never reveal that the German Enigma cipher had been broken because it would give the defeated enemy the chance to say they "were not well and fairly beaten". [http://www.telegraph.co.uk/news/main.jhtml?xml=/news/2006/06/22/nenigma22.xml&sSheet=/news/2006/06/22/ixuknews.html]US Navy cryptographers (with cooperation from British and Dutch cryptographers after 1940) broke into several Japanese Navy crypto systems. The break into one of them,JN-25 , famously led to the US victory in theBattle of Midway ; and to the publication of that fact in theChicago Tribune shortly after the battle, though the Japanese seem not to have noticed for the kept using the JN-25 system. A US Army group, theSIS , managed to break the highest security Japanese diplomatic cipher system (an electromechanical 'stepping switch' machine called Purple by the Americans) even before WWII began. The Americans referred to the intelligence resulting from cryptanalysis, perhaps especially that from the Purple machine, as 'Magic'. The British eventually settled on 'Ultra ' for intelligence resulting from cryptanalysis, particularly that from message traffic protected by the various Enigmas. An earlier British term for Ultra had been 'Boniface' in an attempt to suggest, if betrayed, that it might have an individual agent as a source.The German military also deployed several mechanical attempts at a
one-time pad . Bletchley Park called them the Fish ciphers, andMax Newman and colleagues designed and deployed the Heath Robinson, and then the world's first programmable digital electronic computer, the Colossus, to help with their cryptanalysis. The German Foreign Office began to use theone-time pad in 1919; some of this traffic was read in WWII partly as the result of recovery of some key material in South America that was discarded without sufficient care by a German courier.The Japanese Foreign Office used a locally developed electrical stepping switch based system (called Purple by the US), and also had used several similar machines for attaches in some Japanese embassies. One of these was called the 'M-machine' by the US, another was referred to as 'Red'. All were broken, to one degree or another, by the Allies.
Allied cipher machines used in WWII included the British
TypeX and the AmericanSIGABA ; both were electromechanical rotor designs similar in spirit to the Enigma, albeit with major improvements. Neither is known to have been broken by anyone during the War. The Poles used theLacida machine, but its security was found to be less than intended (by Polish Army cryptographers in the UK), and its use was discontinued. US troops in the field used theM-209 and the still less secureM-94 family machines. British SOE agents initially used 'poem ciphers' (memorized poems were the encryption/decryption keys), but later in the War, they began to switch toone-time pad s.The
VIC cipher (used at least until 1957 in connection withRudolf Abel 's NY spy ring) was a very complex hand cipher, and is claimed to be the most complicated known to have been used by the Soviets, according to David Kahn in "Kahn on Codes". For the decrypting of Soviet ciphers (particularly when "one-time pads" were reused), seeVenona project .Modern cryptography
hannon
The era of modern cryptography really begins with
Claude Shannon , arguably the father of mathematical cryptography, with the work he did during WWII on communications security. In1949 he published [http://www3.edgenet.net/dcowley/docs.html Communication Theory of Secrecy Systems] in the Bell System Technical Journal and a little later the book, Mathematical Theory of Communication, withWarren Weaver . Both included results from his WWII work. These, in addition to his other works on information and communication theory established a solid theoretical basis for cryptography and also for much of cryptanalysis. And with that, cryptography more or less disappeared into secret government communications organizations such asNSA ,GCHQ , and their equivalents elsewhere. Very little work was again made public until the mid '70s, when everything changed.An encryption standard
The mid-
1970s saw two major public (i.e., non-secret) advances. First was the publication of the draftData Encryption Standard in the U.S. "Federal Register" on17 March 1975 . The proposed DES cipher was submitted by a research group at IBM, at the invitation of the National Bureau of Standards (nowNIST ), in an effort to develop secure electronic communication facilities for businesses such as banks and other large financial organizations. After 'advice' and modification byNSA , acting behind the scenes, it was adopted and published as aFederal Information Processing Standard Publication in1977 (currently at FIPS 46-3). DES was the first publicly accessible cipher to be 'blessed' by a national agency such as NSA. The release of its specification by NBS stimulated an explosion of public and academic interest in cryptography.The aging DES was officially replaced by the
Advanced Encryption Standard (AES) in2001 when NIST announced FIPS 197. After an open competition, NIST selectedRijndael , submitted by two Belgian cryptographers, to be the AES. DES, and more secure variants of it (such asTriple DES ; see FIPS 46-3), are still used today, having been incorporated into many national and organizational standards. However, its 56-bit key-size has been shown to be insufficient to guard againstbrute force attack s (one such attack, undertaken by the cyber civil-rights groupElectronic Frontier Foundation in1997 , succeeded in 56 hours — the story is in "Cracking DES", published by O'Reilly and Associates). As a result, use of straight DES encryption is now without doubt insecure for use in new cryptosystem designs, and messages protected by older cryptosystems using DES, and indeed all messages sent since1976 using DES, are also at risk. Regardless of DES' inherent quality, the DES key size (56-bits) was thought to be too small by some even in 1976, perhaps most publicly byWhitfield Diffie . There was suspicion that government organizations even then had sufficient computing power to break DES messages; clearly others have achieved this capability.Public key
The second development, in
1976 , was perhaps even more important, for it fundamentally changed the way cryptosystems might work. This was the publication of the paper [http://citeseer.nj.nec.com/340126.html New Directions in Cryptography] byWhitfield Diffie andMartin Hellman . It introduced a radically new method of distributing cryptographic keys, which went far toward solving one of the fundamental problems of cryptography, key distribution, and has become known asDiffie-Hellman key exchange . The article also stimulated the almost immediate public development of a new class of enciphering algorithms, theasymmetric key algorithm s.Prior to that time, all useful modern encryption algorithms had been
symmetric key algorithm s, in which the samecryptographic key is used with the underlying algorithm by both the sender and the recipient, who must both keep it secret. All of the electromechanical machines used in WWII were of this logical class, as were theCaesar andAtbash ciphers and essentially all cipher systems throughout history. The 'key' for a code is, of course, the codebook, which must likewise be distributed and kept secret, and so shares most of the same problems in practice.Of necessity, the key in every such system had to be exchanged between the communicating parties in some secure way prior to any use of the system (the term usually used is 'via a
secure channel ') such as a trustworthy courier with a briefcase handcuffed to a wrist, or face-to-face contact, or a loyal carrier pigeon. This requirement is never trivial and very rapidly becomes unmanageable as the number of participants increases, or when secure channels aren't available for key exchange, or when, as is sensible cryptographic practice, keys are frequently changed. In particular, if messages are meant to be secure from other users, a separate key is required for each possible pair of users. A system of this kind is known as a secret key, orsymmetric key cryptosystem. D-H key exchange (and succeeding improvements and variants) made operation of these systems much easier, and more secure, than had ever been possible before in all of history.In contrast, asymmetric key encryption uses a pair of mathematically related keys, each of which decrypts the encryption performed using the other. Some, but not all, of these algorithms have the additional property that one of the paired keys cannot be deduced from the other by any known method other than trial and error. An algorithm of this kind is known as a public key or asymmetric key system. Using such an algorithm, only one key pair is needed per user. By designating one key of the pair as private (always secret), and the other as public (often widely available), no secure channel is needed for key exchange. So long as the private key stays secret, the public key can be widely known for a very long time without compromising security, making it safe to reuse the same key pair indefinitely.
For two users of an asymmetric key algorithm to communicate securely over an insecure channel, each user will need to know their own public and private keys as well as the other user's public key. Take this basic scenario:
Alice and Bob each have a pair of keys they've been using for years with many other users. At the start of their message, they exchange public keys, unencrypted over an insecure line. Alice then encrypts a message using her private key, and then re-encrypts that result using Bob's public key. The double-encrypted message is then sent as digital data over a wire from Alice to Bob. Bob receives the bit stream and decrypts it using his own private key, and then decrypts that bit stream using Alice's public key. If the final result is recognizable as a message, Bob can be confident that the message actually came from someone who knows Alice's private key (presumably actually her if she's been careful with her private key), and that anyone eavesdropping on the channel will need Bob's private key in order to understand the message.Asymmetric algorithms rely for their effectiveness on a class of problems in mathematics called one-way functions, which require relatively little computational power to execute, but vast amounts of power to reverse, if reversal is possible at all. A classic example of a one-way function is multiplication of very large prime numbers. It's fairly quick to multiply two large primes, but very difficult to find the factors of the product of two large primes. Because of the mathematics of one-way functions, most possible keys are bad choices as cryptographic keys; only a small fraction of the possible keys of a given length are suitable, and so asymmetric algorithms require very long keys to reach the same level of security provided by relatively shorter symmetric keys. The need to both generate the key pairs, and perform the encryption/decryption operations make asymmetric algorithms computationally expensive, compared to most symmetric algorithms. Since symmetric algorithms can often use any sequence of (random, or at least unpredictable) bits as a key, a disposable "session key" can be quickly generated for short-term use. Consequently, it is common practice to use a long asymmetric key to exchange a disposable, much shorter (but just as strong) symmetric key. The slower asymmetric algorithm securely sends a symmetric session key, and the faster symmetric algorithm takes over for the remainder of the message.
Asymmetric key cryptography,
Diffie-Hellman key exchange, and the best known of the public key / private key algorithms (i.e., what is usually called theRSA algorithm), all seem to have been independently developed at a UK intelligence agency before the public announcement by Diffie and Hellman in 1976.GCHQ has released documents claiming they had developed public key cryptography before the publication of Diffie and Hellman's paper. Various classified papers were written at GCHQ during the1960s and1970s which eventually led to schemes essentially identical toRSA encryption and toDiffie-Hellman key exchange in1973 and1974 . Some of these have now been published, and the inventors (James H. Ellis ,Clifford Cocks , and Malcolm Williamson) have made public (some of) their work.Cryptography politics
The public developments of the 1970s broke the near monopoly on high quality cryptography held by government organizations (see S Levy's "Crypto" for a journalistic account of some of the policy controversy of the time in the US). For the first time ever, those outside government organizations had access to cryptography not readily breakable by anyone (including governments). Considerable controversy, and conflict, both public and private, began more or less immediately. It has not yet subsided. In many countries, for example,
export of cryptography is subject to restrictions. Until1996 export from the U.S. of cryptography using keys longer than 40 bits (too small to be very secure against a knowledgeable attacker) was sharply limited. As recently as2004 , formerFBI DirectorLouis Freeh , testifying before the9/11 Commission , called for new laws against public use of encryption.One of the most significant people favoring strong encryption for public use was
Phil Zimmermann . He wrote and then in 1991 releasedPGP (Pretty Good Privacy), a very high qualitycrypto system . He distributed a freeware version of PGP when he felt threatened by legislation then under consideration by the US Government that would require backdoors to be included in all cryptographic products developed within the US. His system was released worldwide shortly after he released it in the US, and that began a long criminal investigation of him by the US Government Justice Department for the alleged violation of export restrictions. The Justice Department eventually dropped its case against Zimmermann, and the freeware distribution of PGP has continued around the world. PGP even eventually became an open Internet standard (RFC 2440 orOpenPGP ).Modern cryptanalysis
While modern ciphers like AES and the higher quality asymmetric ciphers are widely considered unbreakable, poor designs and implementations are still sometimes adopted and there have been important cryptanalytic breaks of deployed crypto systems in recent years. Notable examples of broken crypto designs include DES, the first
Wi-Fi encryption scheme WEP, theContent Scrambling System used for encrypting and controllingDVD use, theA5/1 andA5/2 ciphers used inGSM cell phones, and theCRYPTO1 cipher used in the widely deployedMIFARE Classicsmart card s fromNXP Semiconductors , a spun off division ofPhilips Electronics . All of these are symmetric ciphers. Thus far, not one of the mathematical ideas underlying public key cryptography has been proven to be 'unbreakable', and so some future mathematical analysis advance might render systems relying on them insecure. While few informed observers foresee such a breakthrough, the key size recommended for security as best practice keeps increasing as increased computing power required for breaking codes becomes cheaper and more available.ee also
*
NSA encryption systems
*Steganography
*Timeline of cryptography
*Topics in cryptography
*World War I cryptography
*World War II cryptography References
* David Kahn, "The Codebreakers", New York, Macmillan, 1967.
* Steven Levy, "Crypto: How the Code Rebels Beat the Government — Saving Privacy in the Digital Age", New York, Viking Press, 2001.
*Ibrahim A. Al-Kadi "The origins of cryptology: The Arab contributions”, Cryptologia, 16(2) (April 1992) pp. 97–126.External links
* [http://research.cyber.ee/~lipmaa/crypto/ Helger Lipmaa's cryptography pointers]
* [http://users.telenet.be/d.rijmenants/en/timeline.htm Timeline of cipher machines]
Wikimedia Foundation. 2010.