Information Security

Passwords are the most common authentication mechanism to verify user identity. Users provide secret passwords that only they should know, proving their identity to the system. Proper password policies and hashing are essential for maintaining security against unauthorized access.

Cryptanalysis is the science of analyzing information systems to discover hidden aspects of ciphers. It involves finding weaknesses in encryption algorithms to recover plaintext without knowing the key. This field drives advances in cryptography by exposing vulnerabilities.

Asymmetric cryptography, also called public-key cryptography, uses a pair of keys: a public key for encryption and a private key for decryption. This solves the key distribution problem inherent in symmetric systems. Symmetric systems use the same key for both operations, which requires secure key exchange.

Symmetric cryptography uses a single secret key for both encryption and decryption. This requires both sender and receiver to securely share the key beforehand. Asymmetric cryptography uses different keys for each operation.

In cryptography, plaintext is the original readable message, and ciphertext is the encrypted result. The encryption algorithm transforms plaintext into ciphertext using a key. Decryption reverses this process to recover the plaintext.

Plaintext refers to the original, unencrypted message that is readable by humans. Ciphertext is the encrypted version that appears scrambled. The encryption process converts plaintext to ciphertext.

A capability is an unforgeable token that grants the holder specific access rights to an object. It's like a key - possession of the capability proves authorization. Capabilities are a fundamental concept in access control systems, contrasting with access control lists that store permissions with the object.

Encryption algorithms require a key as a parameter - it's the secret that determines the specific transformation. Without the key, the encryption or decryption cannot be performed correctly. The same plaintext encrypted with different keys produces different ciphertexts.

Common access control mechanisms include hierarchical approaches (like protection rings or multilevel security) and list-based approaches (like Access Control Lists). These represent two fundamental paradigms for managing permissions. Hierarchies organize by privilege levels, while lists enumerate explicit permissions.

False rejection ratio measures the rate at which a biometric or authentication system incorrectly rejects legitimate users who should be granted access. It represents the system's failure to recognize authorized users.

Encryption is the process of converting data into a coded form that cannot be read without the proper decryption key. This ensures data confidentiality and security during storage or transmission. Compression reduces file size but doesn't secure data, while biometrics and ergonomics are unrelated to data protection.

Authentication is the process of verifying a user's identity, typically through login credentials like username and password. It's different from authorization (what permissions an authenticated user has) or accessibility (making systems usable by people with disabilities). Configuration refers to system settings, not identity verification.