--- title: Symmetric Cryptography description: Symmetric Cryptography --- [![e-Zest logo\_An accion lab company\_Colour](https://blog.e-zest.com/hubfs/images/Logos%20with%20Tagline/Corporate/SVG/e-Zest%20logo_An%20accion%20lab%20company_Colour.svg "e-Zest logo_An accion lab company_Colour")](https://www.e-zest.com/) - [WORK](https://www.e-zest.com/our-work) - [SERVICES](https://www.e-zest.com/our-services) - [Product Engineering](https://www.e-zest.com/digital-product-engineering-services) - [Enterprise Data Services](https://www.e-zest.com/enterprise-data-services) - [Digital Commerce](https://www.e-zest.com/digital-commerce-services) - [Digital Operations](https://www.e-zest.com/digital-operations) - [Digital Consulting](https://www.e-zest.com/digital-transformation-consulting-services) - [Digital Experience Design](https://www.e-zest.com/digital-experience-design) - [INSIGHTS](https://blog.e-zest.com/) - [CAREERS](https://www.e-zest.com/careers) - [ENTERPRISE DATA SERVICES](https://www.e-zest.com/enterprise-data-services) - [GENERATIVE AI](https://www.e-zest.com/generative-ai) - [Healthcare](https://healthcare.e-zest.com) - [Contact Us](https://www.e-zest.com/contact-us) - ![Elevating Product Engineering with AI and ML](https://blog.e-zest.com/hubfs/Elevating%20Product%20Engineering%20with%20AI%20and%20ML.jpg) [BLOGS](https://blog.e-zest.com) #### Elevating Product Engineering with AI and ML As technology evolves and customer choices broaden, there is an increasing ... [Read more](https://blog.e-zest.com/elevating-product-engineering-with-ai-and-ml) - ![e-Zest – An Accion Labs Company gets Recognition as a Contender in the ISG Provider Lens™ Study on Digital Engineering Services 2024](https://blog.e-zest.com/hubfs/e-Zest%20%E2%80%93%20An%20Accion%20Labs%20Company%20-%20Gets%20Recognition%20as%20a%20Contender%20in%20the%20ISG%20Provider%20LensTM%20Study%20on%20Digital%20Engineering%20Services%202024.jpg) [NEWS](https://blog.e-zest.com/news) #### e-Zest – An Accion Labs Company gets Recognition as a Contender in the ISG Provider Lens™ Study on Digital Engineering Services 2024 We are delighted to announce that e-Zest – An Accion Labs Company has been ... [Read more](https://blog.e-zest.com/news/e-zest-an-accion-labs-company-gets-recognition-as-a-contender-in-the-isg-provider-lens-study-on-digital-engineering-services-2024) - ![e-Zest Solutions supports Digital Pune Mission](https://blog.e-zest.com/hubfs/blog-files/Digital%20Literacy%20Bus%20e-Zest.png) [CSR](https://blog.e-zest.com/csr) #### e-Zest Solutions supports Digital Pune Mission **Pune, India:** e-Zest Solutions, a leading digital technology innovation ... [Read more](https://blog.e-zest.com/csr/e-zest-solutions-supports-digital-pune-mission) - [Work](https://www.e-zest.com/our-work) - [Services](https://www.e-zest.com/our-services) - [Insights](https://blog.e-zest.com) - [Careers](https://www.e-zest.com/careers) - [Enterprise Data](https://www.e-zest.com/enterprise-data-services) - [Generative AI](https://www.e-zest.com/generative-ai) - [Innovations](https://www.e-zest.com/innovations) - [Healthcare](https://healthcare.e-zest.com) - [About](https://www.e-zest.com/about-us) - [Contact](https://www.e-zest.com/contact-us) - [Blog](https://blog.e-zest.com/) - [News](https://blog.e-zest.com/news) - [CSR](https://blog.e-zest.com/csr) - [![Linkedin Icon](https://blog.e-zest.com/hubfs/icons/linkedin_icon_white.svg)](https://www.linkedin.com/company/e-zest-solutions/) - [![Twitter Icon](https://blog.e-zest.com/hubfs/twitter-logo-silhouette%20(5).svg)](https://twitter.com/ezest) - [![Facebook Icon](https://blog.e-zest.com/hubfs/facebook-app-logo%20(4).svg)](https://www.facebook.com/61259256638) - [![Instagram Icon](https://blog.e-zest.com/hubfs/instagram-logo%20(4).svg)](https://www.instagram.com/ezestsolutions/) - [![Youtube Icon](https://blog.e-zest.com/hubfs/icons/youtube_icon_white.svg)](https://www.youtube.com/user/ezestcorporate) [![Go to top icon](https://blog.e-zest.com/hubfs/AA%20Assets/top%20button.svg)](https://blog.e-zest.com/symmetric-cryptography/#top) Hit enter to search or ESC to close Insights e-Zest members share technology ideas to foster digital transformation. - [Blog](https://blog.e-zest.com) - [News](https://blog.e-zest.com/news) - [Podcasts](https://www.e-zest.com/podcasts) - [Healthcare](https://blog.e-zest.com/healthcare) - [CSR](https://blog.e-zest.com/csr) - [Whitepaper](https://blog.e-zest.com/whitepaper) - [Playbook](https://blog.e-zest.com/playbook) - [Media Kit](https://www.e-zest.com/media-kit) # Symmetric Cryptography [Madhura Oak](https://blog.e-zest.com/author/madhura-oak) Jul 17, 2012 [security](https://blog.e-zest.com/topic/security) [Stream Cipher](https://blog.e-zest.com/topic/stream-cipher) [Data Encryption Standard](https://blog.e-zest.com/topic/data-encryption-standard) [Transport Layer Security](https://blog.e-zest.com/topic/transport-layer-security) [Block Cipher](https://blog.e-zest.com/topic/block-cipher) [symmetric cryptography](https://blog.e-zest.com/topic/symmetric-cryptography) [cipher text](https://blog.e-zest.com/topic/cipher-text) [Technology](https://blog.e-zest.com/topic/technology) - - - - Cryptography is a mechanism of transforming sensitive information from meaningful plain text to some garbled form called *cipher text,* usually usedto securely transfer it over a network, thus preventing it from eavesdropping, tampering or forgery. Cryptography can also be used for storing sensitive information in database. In ancient times, Julius Caesar used cryptography to send messages to his military. In cryptography, the information is encrypted before being sent by the sender and decrypted when the receiver receives it. *Encryption* is the process of transforming the information from plain text to *cipher text* with the help of additional data called as *key*. *Decryption* is the process of converting the *cipher text* back to the original information. Either same or different key is used for decrypting the information depending on the type of cryptography used. There are two types of cryptography depending on the type of key used – *symmetric cryptography* and *asymmetric cryptography*. **Symmetric cryptography** Symmetric cryptography also called as the *secret key cryptography* uses same key for encrypting and decrypting messages. The key is kept as a secret and needs to be transferred securely between sender and receiver. Any unauthorized access to the key can lead to information theft as the messages can be decrypted or the messages can be forged before they reach the receiver or new messages can be sent under the false identify of the sender. Since a message encrypted with a key cannot be decrypted by another key, symmetric cryptography provides authenticated access to the data as long as the keys are kept secret between sender and receiver. Secure exchange of keys is a drawback of symmetric cryptography. Symmetric cryptography algorithms are faster than asymmetric cryptography algorithms and they work even faster when they are directly implemented on hardware. Symmetric cryptography algorithms – DES, RC2, RC4, Triple DES, AES, IDEA, BlowFish, PGP, SAFER, SkipJack, Vernam cipher and SEAL **Block Ciphers** Block ciphers are symmetric ciphers which break plain text into fixed length blocks and encipher the blocks. The cipher text is of same length as that of the block. The entire block of cipher text needs to be received in order to decrypt it. Different techniques such as *Electronic Codebook* (ECB), *Cipher Block Chaining* (CBC) and Output Feedback (OFB) are used. ECB encrypts all blocks of plain text with the same key and hence is not recommended. In CBC, each plain text block is XORed with the previous cipher text block before encryption. Multiple rounds of encryption are performed in *iterated block ciphers*. **Stream Ciphers** Stream ciphers encrypt small group of plain text bits by XORing them with a same-length sequence of bits called as *keystream.* **Data Encryption Standard (DES)** This iterated block cipher based on Fiestel technique was invented by IBM in 1976. It uses 56-bit key with additional 8 parity bits. DES with CBC is widely used in legacy applications for securing financial data. There are 4 weak keys in DES and 12 semi-weak keys. The weak keys are excluded. DES is also used in Automated Teller Machines (ATM). However, it is vulnerable to brute force attacks, due to its short key, in which all the possible key combinations are tried for invasion. DES should not be used anymore since it is considered as no longer secure. Instead use of a variant of DES called Triple DES or Advanced Encryption Standard (AES) should be preferred. **Triple DES** This provides more security than DES by applying DES three times using three different keys. The key length is 3 x 56 = 128 bits. The possible key combinations of 2128 make brute-force attacks virtually impossible. **Triple DES with 2 keys** This algorithm applies DES encryption three times by using two keys. The encryption is done by first, followed by second and again by first key. The key length is 2 x 56 = 112 bits. **Asymmetric crytography** Asymmetric cryptography also called as *public key cryptography* uses a pair of keys – public key and private key. A message encrypted by a public key can be decrypted only by using the matching private key. A message encrypted by a private key can be decrypted by using the matching public key. Asymmetric cryptography is more secure than symmetric cryptography as only the public key is transferred but the private key is never transferred. However, it is very slow in comparison with symmetric cryptography as it requires more processing for encryption and decryption. **Digital Certificates** Public keys in asymmetric cryptography are distributed as a part of *Digital Certificate*. Along with the public key, it contains information about the user, user’s e-mail address, country, name of server, name of organization to which the user belongs and organization that issued the certificate. **Encrypting large files** Symmetric cryptography is suitable for encrypting large chunks of data such as large files. A hybrid approach of both symmetric and asymmetric cryptography is used for sending large encrypted files over a network where the file is encrypted using secret key (AES, 3DES etc.) and the secret key is encrypted using asymmetric cryptography (RSA). Thus both enciphered file and enciphered secret key is sent to the recipient. Using RSA alone will not work as it can only encipher the bits same as the key length. To encrypt large files you’ll need to break them into multiple parts and encrypt each part, which is not a good idea as multiple packets enciphered with same key can be attacked. **Transport Layer Security (TLS) protocol** [Transport Layer Security](http://www.ietf.org/rfc/rfc5246.txt) (TLS) protocol which is a successor of Server Socket Layer (SSL) and used for communication by client-server applications uses symmetric cryptography. This protocol is itself composed of two protocols – TLS Record protocol and TLS Handshake protocol. The TLS Record protocol is layered on top of reliable transport protocol such as TCP and provides a private and reliable connection. For each connection of TLS Record protocol a unique secret key is generated and negotiated with the receiver by TLS Handshake protocol. The TLS Record protocol can also be used without encryption. - - - ### Similar Blog [![How to Store and Retrieve Secrets in Azure](https://blog.e-zest.com/hubfs/Blog%20Graphic%20How%20to%20store%20and%20retrieve%20secret%20in%20Azure-03.jpg) How to Store and Retrieve Secrets in Azure Azure Key Vault is a cloud service that provides a secure place to store secrets. It enables the safe storage of API (Application ... By Swapnil Thitame Mar 06, 2023](https://blog.e-zest.com/how-to-store-and-retrieve-secrets-in-azure) [![DevSecOps – An Approach to Security](https://blog.e-zest.com/hubfs/DevSecOps%20v1-03.jpg) DevSecOps – An Approach to Security DevSecOps stands for development, security, and operations. The term "DevSecOps" has recently created a lot of buzz in the ... By Mohini Wable Nov 02, 2022](https://blog.e-zest.com/devsecops-an-approach-to-security) [![Insightful Tips CIOs must not Ignore](https://blog.e-zest.com/hubfs/Blog%20Graphics%20(Insightful%20tips%20CIOs%20must%20not%20ignore%20in%202017).jpg) Insightful Tips CIOs must not Ignore CIOs of enterprises are under tremendous pressure to innovate and evolve according to the ever changing business dynamics. CIOs ... By Nidhi Thakkar Jan 27, 2017](https://blog.e-zest.com/insightful-tips-cios-must-not-ignore-in-2017) [![SharePoint - Simplifying the Life of Government](https://blog.e-zest.com/hubfs/Blog%20Graphic%20(SharePoint%20-%20Simplifying%20the%20life%20of%20government).jpg) SharePoint - Simplifying the Life of Government SharePoint is one of the widely used platform, especially in the government sector, because of its collaboration and content ... By Nidhi Thakkar Jan 11, 2017](https://blog.e-zest.com/sharepoint-simplifying-the-life-of-government) [![Technology stories you cannot miss – Week 43, 2016](https://blog.e-zest.com/hubfs/Tech_Digest_Week_43.png) Technology stories you cannot miss – Week 43, 2016 By Corporate Oct 21, 2016](https://blog.e-zest.com/technology-stories-you-cannot-miss-week-43-2016) [Oracle NoSQL Database (ONDB) Relational databases have been around us for more than 20 years now. Needless to say, they are mature and an obvious choice for ... By Madhura Oak Dec 24, 2013](https://blog.e-zest.com/oracle-nosql-database-ondb/) [Session State Isolation Techniques Isolation of data in a session is the trickiest part of session management. A session may constitute of multiple requests. ... By Madhura Oak Dec 02, 2013](https://blog.e-zest.com/session-state-isolation-techniques/) [Session Management There are three ways of session management in n-tier applications: By Madhura Oak Nov 27, 2013](https://blog.e-zest.com/session-management/) [Transaction and Query timeout Performance is one of the non-functional requirements of an application. It defines the acceptable maximum response time for ... By Madhura Oak Nov 25, 2013](https://blog.e-zest.com/transaction-and-query-timeout/) [![Multiple Inheritance in Domain Model Design](https://blog.e-zest.com/hs-fs/file-3586010320-png/blog-files/uml-class-diagram-%E2%80%93-bridge-pattern.png) Multiple Inheritance in Domain Model Design While using multiple inheritance in domain model design you need to be cautious as programming languages such as Java do not ... By Madhura Oak Nov 13, 2013](https://blog.e-zest.com/multiple-inheritance-in-domain-model-design/) ## Helping Organizations Thrive in the Digital Age [Contact Us](https://www.e-zest.com/contact-us) - [About](https://www.e-zest.com/about-us) - [Services](https://www.e-zest.com/our-services) - [Work](https://www.e-zest.com/our-work) - [Insights](https://blog.e-zest.com/) - [Healthcare](https://healthcare.e-zest.com/) - [Accion Labs](https://www.accionlabs.com/) - - - - - - Dallas - Detroit - Hannover - Vienna - London - Pune © 2025 e-Zest Solutions - [Privacy Policy](https://www.e-zest.com/privacypolicy) - [Cookie Policy](https://www.e-zest.com/cookie-policy) Contact us Contact us e-Zest is a leading digital innovation partner for enterprises and technology companies that utilizes emerging technologies for creating engaging customers experiences. Being a customer-focused and technology-driven company, it always helps clients in crafting holistic business value for their software development efforts. It offers software development and consulting services for cloud computing, enterprise mobility, big data and analytics, user experience and digital commerce.