Computer Science · 10th Grade · Cybersecurity and Digital Defense · Weeks 28-36

Introduction to Cryptography

Students learn the basic principles of cryptography, including symmetric and asymmetric encryption.

• Common Core State Standards
• CSTA: 3A-NI-06
• CSTA: 3A-NI-08

About This Topic

Cryptography is the mathematical foundation of modern digital security. In a 10th-grade US computer science course aligned to CSTA standards 3A-NI-06 and 3A-NI-08, students learn that encryption transforms readable plaintext into unreadable ciphertext using a key, and that the security of a system depends more on key management than on keeping the algorithm secret. Symmetric encryption uses the same key for both encryption and decryption, making it fast and suitable for bulk data, but it creates a key-distribution problem: how do two parties share a secret key without meeting in person?

Asymmetric encryption solves this with a mathematically linked key pair: a public key anyone can see and a private key kept secret. Data encrypted with one key can only be decrypted with the other. This property enables secure communication between strangers, which is the foundation of HTTPS and email encryption. Students also learn that the strength of an algorithm matters; weak or outdated algorithms like DES or MD5 for hashing can be broken with modern computing power.

Hands-on cipher activities make abstract cryptographic concepts tangible. Students who manually encrypt and decrypt messages develop a more accurate mental model of how keys and algorithms interact.

Key Questions

1. Differentiate between symmetric and asymmetric encryption.
2. Explain the role of a key in cryptographic systems.
3. Analyze the security implications of a weak encryption algorithm.

Learning Objectives

• Compare and contrast the security strengths and weaknesses of symmetric and asymmetric encryption algorithms.
• Explain the function of a cryptographic key in both symmetric and asymmetric systems.
• Analyze the impact of a weak encryption algorithm on the confidentiality of digital communications.
• Design a simple scenario demonstrating the key distribution problem in symmetric encryption.

Before You Start

Basic Computer Networking Concepts

Why: Understanding how data is transmitted across networks is essential to grasp the need for secure communication.

Introduction to Data Representation

Why: Students need to understand that data is represented digitally to comprehend how it can be transformed through encryption.

Key Vocabulary

Plaintext	Readable, unencrypted data that is understandable by humans or computers.
Ciphertext	Encrypted data that is unreadable without the correct decryption key.
Symmetric Encryption	A type of encryption that uses a single, shared secret key for both encrypting and decrypting data.
Asymmetric Encryption	A type of encryption that uses a pair of mathematically linked keys: a public key for encryption and a private key for decryption.
Cryptographic Key	A piece of information, like a password or a string of characters, used to encrypt and decrypt data.

Watch Out for These Misconceptions

Common Misconception

Keeping the encryption algorithm secret is what makes it secure.

What to Teach Instead

Modern cryptographic security is based on Kerckhoffs's principle: the system should be secure even if everything about the system except the key is public knowledge. Security through obscurity is fragile. Analyzing historical cipher failures helps students see why key management is the true challenge.

Common Misconception

Asymmetric encryption replaces symmetric encryption entirely.

What to Teach Instead

Asymmetric encryption is computationally expensive and too slow for bulk data. In practice, systems like TLS use asymmetric encryption only to exchange a symmetric session key, then switch to symmetric encryption for the actual data transfer. Mapping real protocols reinforces this hybrid reality.

Active Learning Ideas

Hands-On Activity: Caesar Cipher to Modern Encryption

Students start by encrypting a short message with a Caesar cipher by hand, then attempt to break a classmate's cipher using frequency analysis. The class then compares this to a demonstration of AES encryption, discussing why the mathematical complexity of modern algorithms makes the frequency analysis approach impractical.

45 min·Pairs

Think-Pair-Share: The Key Distribution Problem

Present this scenario: two students on opposite sides of the room need to share a secret number without anyone else in the room learning it, and they can only communicate by writing on the whiteboard. Students individually brainstorm strategies, pair to refine ideas, then share. Connect the best ideas to Diffie-Hellman key exchange.

25 min·Pairs

Collaborative Mapping: Symmetric vs. Asymmetric Use Cases

Small groups receive a deck of cards, each describing a real use case (online banking session, password storage, email attachment, software update signature). Groups sort the cards into symmetric, asymmetric, or hybrid categories and justify each placement. Groups compare their sorts and resolve disagreements with evidence.

35 min·Small Groups

Real-World Connections

• Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols use asymmetric encryption to establish a secure connection between a web browser and a server, indicated by the padlock icon in the address bar, protecting sensitive information like credit card numbers during online transactions.
• Email services like ProtonMail utilize end-to-end encryption, often employing asymmetric cryptography, to ensure that only the sender and intended recipient can read the message content, even the email provider cannot access it.

Assessment Ideas

Quick Check

Present students with two scenarios: one describing a secret message shared between two friends who can meet in person, and another describing a secure online purchase. Ask students to identify which scenario is better suited for symmetric encryption and which for asymmetric encryption, and to briefly justify their choices.

Discussion Prompt

Pose the question: 'If an encryption algorithm is publicly known, how can it still be secure?' Guide students to discuss the importance of key secrecy and management over algorithm secrecy, referencing the concept of Kerckhoffs's principle.

Exit Ticket

Ask students to write down the primary challenge associated with using symmetric encryption for communication between two parties who have never met. Then, ask them to describe how asymmetric encryption addresses this specific challenge.

Frequently Asked Questions

What is the difference between symmetric and asymmetric encryption?

Symmetric encryption uses a single shared key for both encrypting and decrypting data, making it fast but requiring secure key distribution. Asymmetric encryption uses a mathematically linked key pair where the public key encrypts and the private key decrypts, solving key distribution but at a higher computational cost.

Why is a longer encryption key generally more secure?

Longer keys create exponentially larger keyspaces, meaning an attacker trying every possible key (brute force) needs far more computational time. A 128-bit AES key has 2^128 possible values. Even with current supercomputers, exhausting this space is not computationally feasible.

How is cryptography used in everyday internet activity?

Every HTTPS connection uses TLS, which combines asymmetric encryption (to establish a session key) and symmetric encryption (to protect data in transit). Password storage uses cryptographic hashing. Signed software updates use asymmetric keys to verify authenticity. Cryptography is active in nearly every secure digital interaction.

How does working with ciphers by hand help students understand modern cryptography?

Manually encrypting and breaking simple ciphers gives students direct experience with the relationship between algorithm complexity, key length, and security. When students see how quickly frequency analysis breaks a Caesar cipher, the motivation for mathematically complex modern algorithms becomes immediately clear.