Computer Network Fundamentals: Encryption Standards Security

Most of the encryption standards that are being used such as RSA and DES have not been formally proven to be safe. Why then do we take them to be secure—what evidence do we have?
Asked by Daniel on June 25, 2025

1 Answers

The security of encryption standards like RSA and DES does not come from a formal mathematical proof of absolute safety. Instead, their perceived security is based on two main factors:

  1. Computational Hardness: These algorithms rely on the assumed computational difficulty of specific mathematical problems. For RSA, security depends on the practical difficulty of factoring large composite numbers into their prime factors. For symmetric ciphers like DES, their strength comes from the immense computational resources needed for a brute-force key search, or the absence of more efficient cryptanalytic attacks. This reliance on computationally hard problems is a foundational principle in modern cryptography.

  2. Extensive Public Scrutiny and Cryptanalysis: These algorithms are publicly known. They have been subjected to decades of intense analysis by cryptographers worldwide. The absence of any practical, efficient attacks discovered despite this widespread scrutiny provides strong empirical evidence of their strength within their design parameters. This open evaluation contrasts with "security by obscurity," where transparency is seen as a strength, allowing weaknesses to be found and addressed.

While DES's 56-bit key length eventually became vulnerable to brute-force attacks due to advances in computational power, its underlying algorithm structure proved remarkably resilient to other forms of cryptanalysis for many years. RSA's security remains strong as long as sufficiently large key sizes are used, making the factoring problem computationally infeasible with current technology.

Thistle - June 25, 2025

Your Answer