JNTU B.Tech III CRYPTOGRAPHY AND NETWORK SECURITY Previous Question Paper (February/March - 2022 - R16)

A network security model is a framework designed to protect information from unauthorized access, modification, or destruction during transmission across a network. The model consists of two primary components: the Information Security Transformation and the Trusted Third Party.

The fundamental components of the model are as follows:

• Message/Information Source: The entity or system that generates the data to be transmitted to a destination.
• Transformation Process: This involves the application of security-related transformations to the message. This includes encryption (using algorithms and keys) to ensure confidentiality and the addition of digital signatures or Message Authentication Codes (MACs) to ensure integrity and authenticity.
• Secure Channel: The communication medium through which the transformed information passes. Security mechanisms are applied to this channel to prevent eavesdropping or traffic analysis.
• Trusted Third Party (TTP): An entity trusted by both the sender and receiver to facilitate secure communication. The TTP is responsible for distributing secret keys, managing digital certificates, or acting as an arbiter to resolve disputes regarding the authenticity of a message.
• Security Mechanisms: These are the technical tools implemented within the model, such as encryption algorithms, hash functions, and access control lists, which enforce the security policy.
• Security Attacks: The model must account for potential threats, including passive attacks (e.g., traffic analysis, release of message contents) and active attacks (e.g., masquerade, replay, modification of messages, or denial of service).

The overall objective of this model is to ensure the security triad: Confidentiality (preventing unauthorized disclosure), Integrity (ensuring data is not altered), and Availability (ensuring systems are accessible to authorized users). By integrating these components, the model provides a structured approach to identifying vulnerabilities and implementing countermeasures effectively.

Cryptography techniques are broadly categorized into substitution and transposition ciphers, both of which are fundamental building blocks of classical encryption.

Substitution Techniques involve replacing each character or bit of the plaintext with another character or bit. The most common examples include:

1. Caesar Cipher: A monoalphabetic cipher where each letter is shifted by a fixed number of positions down the alphabet. For a shift of 3, 'A' becomes 'D', 'B' becomes 'E', and so on. The formula is
   C = (P + k) mod 26
   where C is ciphertext, P is plaintext, and k is the key.
2. Playfair Cipher: A polygraphic substitution cipher that encrypts pairs of letters (digraphs) using a 5x5 matrix of letters constructed from a keyword. It reduces the frequency analysis vulnerability of monoalphabetic ciphers.

Transposition Techniques do not change the actual characters of the plaintext but instead rearrange their positions according to a specific rule or pattern. The characters remain the same, but their order is permuted.

1. Rail Fence Cipher: The plaintext is written downwards and diagonally on successive 'rails' of an imaginary fence, then read off row by row. For example, the message 'HELLO WORLD' written on two rails: H L O O L / E L W R D. The ciphertext becomes 'HLOOL ELWRD'.
2. Columnar Transposition: The plaintext is written in rows of a fixed length and then read out column by column based on a key that determines the order of the columns. This provides a higher level of diffusion compared to simple rail fence methods.

While substitution ciphers provide confusion by obscuring the relationship between the plaintext and ciphertext, transposition ciphers provide diffusion by spreading the influence of a single plaintext character over many ciphertext characters. Modern ciphers often combine both techniques in multiple rounds to achieve robust security.