13.1 Symmetric Encryption (AES)

Cryptography turns readable data (plaintext) into unreadable ciphertext so unauthorized parties cannot recover the original content. On the Cyber Test, you are not expected to implement ciphers by hand. You are expected to know which family of algorithm solves which problem, what must be kept secret, and how modern systems combine tools. This section focuses on symmetric encryption — also called shared-key or secret-key cryptography — and on AES, the workhorse algorithm used almost everywhere for bulk confidentiality.

Shared Key: One Secret, Two Directions

In symmetric encryption, the same key encrypts and decrypts. If Alice encrypts a file with key K, Bob needs that same K to decrypt it. Anyone who obtains K can read every message protected with it. Anyone who lacks K should see only ciphertext that is computationally infeasible to reverse.

That single-key model has clear strengths:

• Speed. Symmetric algorithms are designed for high throughput. Encrypting disk volumes, VPN tunnels, TLS record payloads, and database fields at scale is almost always done with a symmetric cipher.
• Simplicity of the trust model. Once both endpoints share a strong key, encryption and decryption are straightforward operations.
• Mature tooling. Operating systems, libraries, and hardware accelerators optimize AES heavily.

It also has a fundamental operational problem: key distribution. How do Alice and Bob get the same secret without an attacker learning it? If they meet in person and load a key onto two devices, that works for a small set of systems. Over the open Internet, strangers cannot safely email a shared password and call it a key exchange. Solving distribution is why real protocols pair symmetric encryption with asymmetric cryptography (covered in the next section) or with pre-shared keys established through a trusted channel.

Contrast this with asymmetric (public-key) cryptography, which uses a key pair: a public key anyone may use to encrypt or verify, and a private key only the owner holds for decrypting or signing. Symmetric = one shared secret. Asymmetric = public/private pair. Remember that distinction; many exam items hinge on it.

What Symmetric Encryption Provides — and What It Does Not

Symmetric encryption primarily delivers confidentiality: ciphertext should reveal nothing useful about plaintext to someone without the key. It does not automatically provide:

• Authentication of the sender (anyone who has the shared key can create valid ciphertext).
• Integrity against clever modifications (depending on mode and whether a MAC or authenticated encryption is used).
• Non-repudiation (shared-key systems cannot uniquely prove which of the key holders produced a message).

Modern practice therefore often uses authenticated encryption (for example AES-GCM) or encrypt-then-MAC constructions so confidentiality and integrity travel together. For the Cyber Test, the high-level lesson is enough: encryption alone is not a complete security story; integrity and authenticity need explicit mechanisms.

AES: The Modern Symmetric Standard

AES (Advanced Encryption Standard) is the U.S. government-selected and globally adopted block cipher for protecting sensitive but unclassified information and commercial data. It replaced older designs such as DES and the short-term stopgap 3DES, which are considered obsolete for new systems because of small block/key sizes and performance cost.

What you need for exam depth:

• AES is a block cipher: it operates on fixed-size blocks of bits (128-bit blocks).
• AES supports key lengths of 128, 192, or 256 bits (often written AES-128, AES-192, AES-256). Longer keys raise the cost of brute-force search; AES-128 remains strong when implemented correctly, and AES-256 is common for higher assurance preferences.
• AES is suitable for bulk data — files, database columns, network session payloads — because it is fast in software and often accelerated in CPU instruction sets.
• You do not need to memorize S-boxes, round counts, or MixColumns mathematics for aptitude-style cyber exams. Knowing that AES is the standard modern symmetric algorithm, that it uses a shared secret key, and that key secrecy is critical is the tested layer.

Modes and Why “Just AES” Is Incomplete

A block cipher needs a mode of operation to encrypt messages longer than one block (CBC, CTR, GCM, and others). Modes differ in how blocks chain and whether they provide integrity. AES-GCM, for example, provides confidentiality plus an authentication tag. The Cyber Test may not drill mode names deeply, but you should recognize that saying “we use AES” implies a correct mode, a unique nonce/IV where required, and careful key handling — not merely naming the algorithm.

Keys, Secrecy, and Operational Reality

Algorithm strength is worthless if the key is weak or exposed. Practical rules that map to exam reasoning:

1. Keep the key secret. Store keys in OS key stores, HSMs, or secrets managers — not in source code, chat logs, or world-readable config files.
2. Use adequate key length and randomness. Keys must come from a cryptographic random source, not from human-memorable phrases used directly as keys.
3. Rotate and revoke. When a key may be compromised, stop using it; decrypt with the old key only as needed to re-encrypt under a new one.
4. Prefer session keys. Long-lived master secrets should mint short-lived session keys so a single compromise has a limited blast radius.

A classic architecture is hybrid encryption: use asymmetric crypto (or a key-agreement protocol) so two parties establish a fresh AES session key, then encrypt the large payload with AES. That pattern appears in TLS and many secure messaging designs. Symmetric crypto does the heavy lifting; asymmetric crypto solves the “how do we share the first secret?” problem.

Where You Will See Symmetric Crypto in Cyber Work

• Full-disk and file encryption (BitLocker-class tools, encrypted archives).
• VPN and TLS record protection after handshake completes.
• Wireless link encryption when a pre-shared or derived session key is in place.
• Database field encryption and backup encryption at rest.

When an exam scenario says “both hosts already share a secret” or “encrypt a large video file quickly,” think symmetric / AES. When it says “prove identity to a stranger on the Internet” or “distribute a public verification key,” think asymmetric/PKI instead.

Study Habit for This Domain

Pair vocabulary tightly: shared key ↔ confidentiality of bulk data ↔ AES. Then add the caveats: key distribution is hard; encryption ≠ authentication; hybrid designs are normal. That three-sentence model answers most Cyber Test items on symmetric cryptography without requiring cipher-engineering detail.