Cryptography
Source: (Matt_Crypto, 2021)
Introduction
Cryptography is the science of protecting information and communication channels through the use of codes, via a computer or manual table lookup. Modern-day cryptographic systems rely heavily on computers to encrypt and decrypt information and communication channels. As with any encryption technology, there are always adversaries looking for ways to attack and break it.
Modern cryptography concerns itself with the following four objectives (Rose, 2020):
Modern cryptography concerns itself with the following four objectives (Rose, 2020):
- Confidentiality: the information cannot be understood by anyone for whom it was unintended
- Integrity: the information cannot be altered in storage or transit between sender and intended receiver without the alteration being detected
- Non-repudiation: the creator/sender of the information cannot deny at a later stage his or her intentions in the creation or transmission of the information
- Authentication: the sender and receiver can confirm each other's identity and the origin/destination of the information
Reflection
Cryptography used to be a term only technology engineers would understand. Today, it is more widely used in everyday life as its power has enabled secured messaging and cryptocurrency, such as bitcoin. This course provided me with a strong understanding of the many facets of cryptography and how it can be applied to cyberspace. Working in law enforcement, I often reflect on how to balance cryptography to solve crime and privacy.
Law enforcement is highly concerned about the severe threat posed by using robust encryption products that do not allow for authorized access or the timely decryption of critical evidence obtained through lawful electronic surveillance and search and seizure (FBI, 2020).
Whether you are law enforcement or not, there is no doubt that strong cryptography makes everyone’s job harder. The whole purpose behind strong cryptography is to protect private assets and information from unwanted access. Any cryptographic backdoors would render cryptography a useless art as information would no longer be secret.
As a member of law enforcement, I am sworn to uphold the constitution and protect the rights of the people. Everyone has the right to privacy. I believe an invasion of one person’s privacy is an invasion of all. One can argue that backdoors are needed when catastrophic events, such as the 2015 San Bernardino terrorist attack (CNN, 2015), save countless lives and bring the terrorist to justice.
Even the law enforcement community requires its cryptography systems to be solid and unbreakable to protect their crucial communication infrastructure and assets from adversaries. Thus, a cryptographic backdoor would allow adversaries to eavesdrop on law enforcement and government activities. I do not think there should be any compromise when it comes to invasion of privacy. Instead, we need to introduce laws allowing law enforcement to conduct specific surveillance activities on suspects and adversaries. For example, the introduction of the USA Patriot Act to help combat terrorism. The purpose of the USA PATRIOT Act is to deter and punish terrorist acts in the United States and around the world, to enhance law enforcement investigatory tools, and other purposes (OFFICE of the DIRECTOR of NATIONAL INTELLIGENCE, 2020).
Below is an artifact I worked on displaying the usage and power of cryptography and laws from local and federal levels. Building a secure system is a delicate balance of protection for the company and the people they serve.
Law enforcement is highly concerned about the severe threat posed by using robust encryption products that do not allow for authorized access or the timely decryption of critical evidence obtained through lawful electronic surveillance and search and seizure (FBI, 2020).
Whether you are law enforcement or not, there is no doubt that strong cryptography makes everyone’s job harder. The whole purpose behind strong cryptography is to protect private assets and information from unwanted access. Any cryptographic backdoors would render cryptography a useless art as information would no longer be secret.
As a member of law enforcement, I am sworn to uphold the constitution and protect the rights of the people. Everyone has the right to privacy. I believe an invasion of one person’s privacy is an invasion of all. One can argue that backdoors are needed when catastrophic events, such as the 2015 San Bernardino terrorist attack (CNN, 2015), save countless lives and bring the terrorist to justice.
Even the law enforcement community requires its cryptography systems to be solid and unbreakable to protect their crucial communication infrastructure and assets from adversaries. Thus, a cryptographic backdoor would allow adversaries to eavesdrop on law enforcement and government activities. I do not think there should be any compromise when it comes to invasion of privacy. Instead, we need to introduce laws allowing law enforcement to conduct specific surveillance activities on suspects and adversaries. For example, the introduction of the USA Patriot Act to help combat terrorism. The purpose of the USA PATRIOT Act is to deter and punish terrorist acts in the United States and around the world, to enhance law enforcement investigatory tools, and other purposes (OFFICE of the DIRECTOR of NATIONAL INTELLIGENCE, 2020).
Below is an artifact I worked on displaying the usage and power of cryptography and laws from local and federal levels. Building a secure system is a delicate balance of protection for the company and the people they serve.