Subject · Information security

Fundamentals of cryptographySyllabus

İF-2211y5 creditsSpring semesterMandatory3

Syllabus

The subject's official programme: general information, outcomes, topic plan, reading list and assessment.

General information

Subject code
İF-2211y
Credits
5
Student workload
105
Semester
Spring semester
Academic year
3
Subject type
Mandatory
Form of education
Full-time
Language of instruction
Azerbaijani
In-class hours
a) 30 saat - mühazirə b) 15 saat - seminar
Out-of-class hours
a) 60 saat - TSİ b) 45 saat - MRTSİ

About the subject

The subject envisages the formation of fundamental knowledge and practical skills in students on the theoretical foundations of cryptography, modern cryptographic methods and algorithms. within the scope of the subject, the history of the creation and development of cryptography, its role in modern information security, its relevance, main areas of application and current problems are studied. the role of cryptographic mechanisms in ensuring confidentiality, integrity and authenticity of data is considered. traditional and modern encryption techniques, symmetric, asymmetric, and hybrid cryptographic approaches, block and stream ciphers, public-key cryptosystems, and the basic working principles of advanced cryptographic algorithms are explored. also, issues of security assessment and cryptanalysis of cryptographic algorithms, provision of authentication by cryptographic methods, key management and application of cryptographic mechanisms in practical systems are studied. the subject is aimed at developing the students' ability to compare different cryptographic methods, choose a cryptographic approach suitable for specific security requirements, and evaluate their practical application features.

Teaching methods

  • lecture
  • seminar
  • presentations
  • interactive discussion

Course learning outcomes (CLO)

  1. CLO 1: He should know the differences between classical and modern cryptography, he should be familiar with the methods of cryptanalysis of classical ciphers. he should know the differences between symmetric and asymmetric encryption systems.

  2. CLO 2: From the principles of information security, he should know how confidentiality and integrity, including the principles of authentication and non-repudiation, are ensured by cryptographic methods.

  3. CLO 3: He should know the differences between block ciphers and stream ciphers, their corresponding algorithms and the fields of application of these algorithms.

  4. CLO 4: Must know algorithms related to public key ciphers and their applications. must be knowledgeable about public key infrastructure.

  5. CLO 5: He should know the properties of hash functions, how they are used to ensure completeness and their essence in digital signatures.

  6. CLO 6: Must know advanced cryptographic protocols and their applications.

Topic plan

  1. 1.
    Basic concepts of cryptography. classic ciphersLecture

    Within the framework of the topic, the main concepts, goals and role of cryptography in ensuring information security are studied. fundamental concepts such as plaintext, ciphertext, encryption, decryption, cryptographic key, and cryptosystem are reviewed. the historical development of cryptography and the main features of classical encryption methods are explained. classical ciphers based on the principles of substitution and displacement, their working principles, application characteristics and main security limitations are investigated. also, construction of classical ciphers, application and simple cryptanalysis methods are considered within the framework of seminar sessions.

  2. 2.
    An introduction to cryptanalysis. cryptanalysis of substitution ciphersLecture

    Within the scope of the subject, the concept of cryptanalysis, its goals, and its role in evaluating the security of cryptographic systems are studied. basic approaches of cryptanalysis, attack models and principles of analysis of encrypted data are reviewed. structural features of substitution ciphers and analysis methods based on letter frequency, character distribution, and statistical properties of language used in their cryptanalysis are explained. also, the analysis of simple substitution ciphers and the principles of plaintext recovery through frequency analysis are explored.

  3. 3.
    Stream ciphersLecture

    The main working principles, structure and application features of stream ciphers are studied within the subject. encrypting plaintext into individual bit or character sequences, generating a key stream, and using it in the encryption process are considered. the characteristics of synchronous and self-synchronous stream ciphers and the differences between them are explained. the generation of pseudorandom sequences, the key requirements for keystream security, and the risks associated with keystream reuse are explored. also, the main applications of stream ciphers, their advantages, limitations and comparative characteristics with block ciphers are reviewed.

  4. 4.
    Des (data encryption standard)Lecture

    Within the framework of the topic, the structure, basic working principles and historical significance of the DES symmetric block encryption algorithm are studied. the block and key sizes of the DES algorithm, the structure based on the feistel network, and the main stages of the encryption process are reviewed. the role of initial and final permutations, round key generation, expansion, s-box permutations, and permutation operations in the encryption process is explained. also, the principle of DES decryption, the main security features, the weaknesses arising from the key size and the reasons for the limitation of its use in modern cryptographic systems are investigated.

  5. 5.
    Aes (advanced encryption standard)Lecture

    Within the framework of the topic, the structure of the AES symmetric block encryption algorithm, its main working principles and its role in modern cryptographic systems are studied. the block and key sizes of the AES algorithm, the aes-128, aes-192 and aes-256 variants and the structure of the encryption rounds are reviewed. the role of subbytes, shiftrows, mixcolumns and addroundkey transformations in the encryption process is explained, as well as the principles of generating round keys. it also examines the AES decryption process, key security features, comparative advantages with the DES algorithm, and key application areas in data protection.

  6. 6.
    Modes of operation of block ciphersLecture

    In the framework of the topic, different modes of operation of block encryption algorithms and their main application principles are studied. the working principles of electronic codebook (ecb), encrypted block chaining (cbc), encrypted feedback (cfb), output feedback (ofb), and counter (ctr) modes are reviewed. the role of initialization vector (iv), nonce, and padding concepts in the application of block ciphers is explained. different modes are compared in terms of security, parallel processing, error propagation and performance characteristics. the security risks associated with the incorrect selection of the mode of operation and the reuse of IV or nonce values ​​are also investigated.

  7. 7.
    Public key cryptographyLecture

    Within the framework of the topic, the main principles, structure and role of public key cryptography in information security are studied. the concept of a public and private key pair, the generation of keys and their use for various purposes are reviewed. in asymmetric cryptography, the principles of encryption and decryption, digital signature and key exchange are explained. mathematical problems underlying the security of public-key cryptosystems and their comparative properties with symmetric cryptography are explored. the main areas of application of public key authentication, key management and public key cryptography in modern information and communication systems are also considered.

  8. 8.
    Rsa cryptosystemLecture

    Within the subject, the mathematical foundations, structure and working principles of the RSA public key cryptosystem are studied. prime numbers, modular calculus, and the role of the euler function in the construction of the RSA algorithm are reviewed. the main stages of creating a public and secret key pair, encryption and decryption processes are explained. the security of the RSA cryptosystem is investigated based on the problem of dividing large integers into primes. it also reviews the application areas of RSA such as digital signature and key protection, the importance of padding mechanisms in practical use, and the main security limitations of the algorithm.

  9. 9.
    Discrete logarithm cryptosystemsLecture

    Within the subject, the mathematical foundations, structure and working principles of open-key cryptosystems based on the discrete logarithm problem are studied. finite groups, modular exponentiation, and the role of the discrete logarithm problem in cryptographic security are reviewed. basic cryptographic approaches based on the discrete logarithm problem, key generation, key exchange, encryption and digital signature principles are explained. also, the main working principles, application features and security requirements of diffi–hellman key exchange and elgamal cryptosystem are investigated.

  10. 10.
    Cryptographic hash functionsLecture

    Within the framework of the topic, the main principles, characteristics and role of cryptographic hash functions in information security are studied. the process of converting arbitrary-length data into a fixed-length hash value and the basic security requirements for cryptographic hash functions are reviewed. the properties of first-image persistence, second-primary image persistence, and collision-resilience are explained. major hash algorithms, such as the md5, sha-1, and sha-2 family, are examined, as well as their security features and limitations. the application of cryptographic hash functions in data integrity verification, password protection, digital signatures, and other cryptographic mechanisms is also considered.

  11. 11.
    Digital signature schemesLecture

    Within the scope of the topic, the concept of digital signature, basic working principles and role in information security are studied. the role of digital signature in ensuring the authenticity, integrity and non-repudiation of information is considered. digital signature creation and verification processes based on cryptographic hash functions and public key cryptography are explained. the working principles and application characteristics of the main digital signature schemes such as rsa, DSA and ECDSA are explored. also reviewed are secure key management, the role of digital certificates, and basic security requirements of digital signature schemes.

  12. 12.
    Qeyri- tarif tənzimetmə metodu.Lecture

    Qeyri-tarif tənzimlənməsi xarici ticarət münasibətlərində idxal və ixrac əməliyyatlarına təsir göstərən, gömrük rüsumlarından fərqli olan iqtisadi, inzibati və hüquqi tədbirlərin məcmusudur. bu tədbirlər dövlət tərəfindən daxili bazarın qorunması, yerli istehsalçıların dəstəklənməsi, əhalinin sağlamlığının və ətraf mühitin mühafizəsi, eləcə də ölkənin iqtisadi təhlükəsizliyinin təmin edilməsi məqsədilə tətbiq olunur.

    • • ftn4: GATT və ütt-nin məqsəd,funksiya və prinsiplərini müəyyən edir.
    • • ftn1: beynəlxalq ticarət hüququnun anlayışını,predmetini və hüququ sistemindəki yerini müəyyən edir
    • • ftn3: xarici ticarətin tənzimlənməsini və qeyri-tarif tənzimetmə metodlarını fərqləndirir.
    • • ftn2: beynəlxalq ticarət hüququnun subyeklərini və prinsiplərini izah edir.
    • • ftn5: BMT sistemində beynəlxalq ticarətin və beynəlxalq ticarət hüququnun rolunu qiymətləndirir
  13. 13.
    Cryptocurrencies and blockchain technologyLecture

    Within the framework of the topic, the basic concepts, structure and working principles of cryptocurrency and blockchain technology are studied. the structure of blocks, the formation of transactions, cryptographic hash functions, and the role of digital signatures in blockchain systems are reviewed. basic principles of distributed ledger, decentralization and consensus mechanisms are explained. the use of public and private keys, cryptographic addresses, and digital wallets in cryptocurrency transactions is explored. the main application areas, security features, advantages and limitations of cryptocurrency and blockchain systems are also reviewed.

  14. 14.
    Post-quantum cryptographyLecture

    Within the scope of the topic, the possible impact of quantum computing on modern cryptographic systems and the basic principles of post-quantum cryptography are studied. threats to public-key cryptosystems based on RSA and the discrete logarithm problem are reviewed by the development of quantum computers. key features of quantum attack-resistant cryptographic approaches and lattice-based, code-based, hash-based, and other post-quantum cryptographic methods are explained. also explored are post-quantum key encapsulation mechanisms and general working principles of digital signature schemes, the transition from existing cryptographic systems to quantum-resistant solutions, and hybrid cryptographic approaches.

Reading list

  1. Aliguliyev r.m, imamverdiyev y.n. fundamentals of cryptography. "information technologies", 2006. - 698 p.
  2. Paar c., pelzl j., understanding cryptography, a textbook for students and practitioners. springer, 2010, 372 p.

Assessment

FormDescriptionScoreRelated CLO
Cari qiymətləndirməCari qiymətləndirmə - fənn üzrə tələbənin semestr müddətində fəaliyyətinin qiymətləndirilməsi olmaqla, mühazirə və məşğələ (laboratoriya) dərs materiallarının mənimsənilmə səviyyəsini qiymətləndirilir.30 balFTN 1-6
DavamiyyətTələbə fənn üzrə dərslərin 25%-dən çoxunda iştirak etmədiyi halda imtahana buraxılmır.10 bal-
Tələbənin sərbəst işiTələbəyə fənn üzrə semestr ərzində 1 sərbəst işin (zəruri hallarda sərbəst işlərin sayı artırıla bilər) yerinə yetirilməsi tapşırığı verilir.10 balFTN--
İmtahanİmtahan şifahi, yazılı, yazılı-elektron, test üsulu ilə keçirilir50 balFTN 1-6