17
$\begingroup$

I'm very uneducated when it comes to cryptography. I have tried to find an answer to my question, but what I've read doesn't quite cover what I'm asking.

I have thought up my own encryption algorithm (which I'm sure is nothing new) and I would like to know why this sort of algorithm is not used in terms of security, efficiency and any other reasons.

It stems from the Caesar Cipher. But, instead of shifting each letter by 13, you shift each character (using computer character values) by a certain value each time.

So, let's say I had the sentence:

My dog's name is Rover.

And I have an array of numbers:

1, 4, 3, 2

I would shift M up by 1 character, y by 4, [space] by 3, d by 2 and then continue with the rest of the sentence, looping through the number array. So, the sentence would be converted into N}#fpk*u!rdof$lu!Vrxfv1.

Let's call the array your "key". Only someone with the key could decipher the message, unless someone figures it out. The more items in your array (key), the safer you are from someone deciphering your message.

Apologies if my explanation is poor. To summarize my question:

  • Why is this bad (or, not used)

  • Is it inefficient/insecure compared to other encryption methods

  • Is there anything else about this that should be considered

Thanks.

$\endgroup$
11
  • 33
    $\begingroup$ This should be (up to naming) a Vigenère Cipher on of the standard examples of classical cryptography (and of cryptography that can't be trivially brute-forced but is still "easy" to break using proper methods). $\endgroup$
    – SEJPM
    Jun 7, 2017 at 20:14
  • 9
    $\begingroup$ Creating crypto algorithms in general isn't bad, but assuming they're secure without spending time analyzing them or researching the history of cryptography is a big risk. Any "home-brewed" algorithm shouldn't be used in practice, or shared with others who might use it. If you're going to keep making algo's in this field, please clearly label them as a "toy cipher" until you know how to prove their security. Learn to prove yourself wrong, before trying to prove yourself to others. This is just my two-cents. $\endgroup$
    – floor cat
    Jun 7, 2017 at 21:17
  • 1
    $\begingroup$ An extension to this might be if the shift numbers where 0 - 25 (for letters A-Z) and the length of the key was the same as the length of the plain text. Then you'd really be onto something... $\endgroup$
    – Paul Uszak
    Jun 7, 2017 at 21:39
  • 4
    $\begingroup$ If your key is as long as your message, you'd be much more secure using a one-time-pad with random data (key) and the xor operation, while still having the same problems with key distribution as you currently have. If your key is shorter than your plain text, it has to repeat, which opens you up to all the statistical analysis methods mentioned in the other answers already. $\endgroup$
    – JesseM
    Jun 7, 2017 at 23:53
  • 2
    $\begingroup$ See crypto.stackexchange.com/q/43272/2430 $\endgroup$ Jun 8, 2017 at 10:12

5 Answers 5

41
$\begingroup$

Edit: how to break Vigenère

Yes, this cipher (which as SEJPM points out, is Vigenère) is vulnerable to frequency analysis, but Vigenère resists this a bit, because common letters don't always get ciphered into the same ciphertext. The unavoidable vulnerability stems from the repeating nature of the key.

Let's say your message is $N$ characters long and your key is $k$ characters long. You may think that by repeating the key until you reach $N$ characters that you gain some "units of security" ("it's $\lfloor N/k \rfloor$ times more secure!"). But if I know your message is enciphered in this way, I have learned a great deal about your plaintext.

If I can estimate your key length $k$ $-$ and I can, with the great Kasiski's help $-$ then I can take every $k$th ciphertext character and group them together (for example, if $k=5$, group together the first, sixth, eleventh, etc. characters, then group the second, seventh, twelfth, etc. into another block, and so on). Each block is enciphered with the same character, a character from your key. At this point, a straightforward frequency analysis comes into play; breaking this is no harder than breaking the Caesar cipher you started with.

I do this for each "group" and now I have recovered your key.


It is cool that you came up with the idea of a polyalphabetic cipher on your own. But as the comment and other answer have pointed out, this cipher is insecure and can be broken quite reliably. Seriously: only use this for fun or pedagogical reasons.

In 1863, Kasiski even knew how to guess the length of the key for this cipher! That forces you to make your key longer / harder to remember.

It's very efficient; you can encipher text quickly with it. But that's a double-edged sword: I can attempt to decipher it quickly as well.

$\endgroup$
15
$\begingroup$

Edit:

I think the edit to the question makes it as vigenere cipher; which invalidates my answer below. @galvatron answer gives the suitable answer why vigenere is not secure.

The old answer below ( applies only to substitution)

Baiscally this is a simple substitution cipher, where each letter is mapped to another letter (i.e. the shift). The answers for your questions:

Why is this bad (or, not used)

Because each language has known frequency analysis patterns. For example, in the English language e is the most used letter. So, if an adversary has a piece of encrypted text using your algorithm (long enough) he can easily know the shift you used for each letter.

Is it inefficient/insecure compared to other encryption methods?

Yes, it is not secure and can be broken easily by statistical analysis. You can use also brute-force with worst case scenario of $26!$.

Is there anything else about this that should be considered?

A better algorithm than yours is called the Vigenere cipher but it is also insecure. See the link (https://en.wikipedia.org/wiki/Vigen%C3%A8re_cipher) for more information.

$\endgroup$
12
  • 2
    $\begingroup$ "d" is the most used letter? It's not "e"? (as in etaoin shrdlu...?) $\endgroup$
    – user47922
    Jun 7, 2017 at 21:24
  • 3
    $\begingroup$ "where each letter is mapped to another letter" - but if the key length is equal to the length of the message, how can a frequency analysis be helpful? Every "e" would be represented by a different symbol and thus you couldn't look for a "symbol" which appears the most. Regardless, the biggest issue in terms of implementation is that your key size would have to be at least as large as the message, which isn't very practical. $\endgroup$
    – noahnu
    Jun 8, 2017 at 0:19
  • 7
    $\begingroup$ The given algorithm is the Vigenere cipher, which invalidates almost everything you've said. It isn't secure, but not for the given reasons, and obviously suggesting that the Vigenere cipher is better (than itself) is out of place. $\endgroup$ Jun 8, 2017 at 2:13
  • 4
    $\begingroup$ It can be broken with statistical analysis easily enough, but 26! isn't going to be brute-forced. That's over 2^88 possible keys. Also, 26! is for an alphabetic substitution, which is not the cipher the OP was describing; they were using an offset into the full "computer character" (presumably ASCII) set, with possible repeats. So 256^keylen possible keys. Which for short keys might actually be brute-forceable, although frequency analysis is still clearly the way to go. $\endgroup$
    – Ray
    Jun 8, 2017 at 2:30
  • 14
    $\begingroup$ The answer is wrong: Even if the encryption method isn't described clearly in the question, an ASCII table and the example clearly shows that it is used as a Vigenere cipher (every symbol is shifted, including the spaces). It is not a simple substitution cipher and the number of keys isn't $26!$. The upvotes here and the lengthy discussion are surprising - since SEJPM already wrote the correct answer in the very first comment. $\endgroup$
    – tylo
    Jun 8, 2017 at 11:49
11
$\begingroup$

Encryption is naïvely viewed as a way to send messages from A to B that cannot be deciphered (at least in practice) by an adversary. Sure, encryption does do that, but modern ciphers do so much more...

A common attack scenario is the known plaintext attack (KPA). Of course, if the adversary already knows the entire plaintext, there's not much to be gained by encrypting it. However, a secure cipher remains secure even if the adversary knows the plaintext of a previous message or merely parts of the plaintext of the current one.

Assume a message was encrypted by your algorithm, and the ciphertext begins with the following bytes.

Pksqr,)Rkus|!

Looks scrambled, so far so good. However, if the attacker knows that recipient is Jenny and that the sender would most likely greet her with

Hello, Jenny!

Subtracting the code points of the plaintext from the code points of the ciphertext gives the following result.

   80 107 115 113 114  44  41  82 107 117 115 124  33
-  72 101 108 108 111  44  32  74 101 110 110 121  33
-----------------------------------------------------
    8   6   7   5   3   0   9   8   6   7   5   3   0

With absolutely no effort, statistical analysis or cryptanalysis skills, the attacker can guess the key to be 8 6 7 5 3 0 9 and decrypt the rest of the message.

Thus, KPA resistance is a requirement for ciphers to be considered secure nowadays. All modern ciphers satisfy this requirement and – if properly used – can securely encrypt billions of plaintext containing billions of characters.

$\endgroup$
2
  • 2
    $\begingroup$ While looking at modern security definitions, I would suggest replacing known plaintext attacks by chosen plaintext attacks as the absolute minimum today (both for symmetric and asymmetric encryption schemes). If some scheme is resistant to KPA but not CPA, no one would consider that scheme to be secure. $\endgroup$
    – tylo
    Jun 9, 2017 at 8:40
  • $\begingroup$ Sure, but showing that a cipher is vulnerable to KPA means that it is even weaker. $\endgroup$
    – Dennis
    Jun 9, 2017 at 14:31
4
$\begingroup$

Sari's answer is very good at explaining why this method isn't particularly good. However I'd like to add that if your array is chosen from a very good random number source (think radioactive decay, the LSB of radio noise etc.), (at least) as long as your plaintext, and you do not use it to encrypt more than a single message, then what you have is a one time pad. It is worth reading about them, as they are theoretically unbreakable, but you have to keep the keys secure and can never reuse them.

$\endgroup$
4
  • 6
    $\begingroup$ Sari's answer failed to realize that the OP actually described a Vigenere cipher and not a monoalphabetic substitution cipher. $\endgroup$
    – tylo
    Jun 8, 2017 at 11:32
  • 5
    $\begingroup$ The OP mentions "looping through the number array". How would that ever be an OTP? $\endgroup$
    – dkaeae
    Jun 8, 2017 at 11:39
  • $\begingroup$ @dkaeae if the array is bigger than your plain text, (and you don't reuse the same array for other messages) then you only use it once. However, that's not the implication given by the OP, so this is really more of a comment as answer, by someone who couldn't comment. $\endgroup$
    – Rick
    Jun 8, 2017 at 17:20
  • $\begingroup$ @dkaeae The OP may mean "looping through the number array" as going through the array multiple times. Or he may mean he has a loop that processes each character of the plain text - in the process iterating through the array, but only once. I don't see enough context in the OP to decide one way or the other. $\endgroup$ Jun 8, 2017 at 20:44
1
$\begingroup$

The reasons why this is not particularly secure have been well explained here. On the off chance that you're interested in pursuing these matters a little further, here are a few useful resources to develop your interest and understanding a little further:

  • Helen Gaines, Cryptanalysis (introductory-level text on elementary ciphers and how they can be broken, available from Dover) (this will show you how to systematically break your cipher)
  • Neal Stephenson, Cryptonomicon (fiction, but thought-provoking)
  • David Kahn, The Code Breakers (classic study of the development of codes in politics and war)
  • Dan Boneh, Crypto I (Coursera course, starts to get into the mathematical bases for modern cryptographic systems - if you're willing to struggle a bit, there's a lot of meat on those bones)

If you make it through those, there are deeper resources out there and you'll be well equipped to find the ones you need next. Expect to need some math fundamentals, number theory and advanced algebra for example will be important. Good luck, and have fun!

$\endgroup$
1
  • $\begingroup$ Applied Cryptography 2nd Edition, Bruce Schneier $\endgroup$
    – Pete
    Dec 23, 2017 at 23:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.