Encryption scrambles data; the key unlocks it
Encryption scrambles plaintext (the original readable data) into ciphertext so it is meaningless if intercepted; only someone with the correct key can decrypt it back. Its purpose is confidentiality: data on a network can be intercepted, so encryption makes an intercepted message unreadable. Note the boundary examiners test — encryption does not stop data being intercepted, it only makes it meaningless.
Symmetric: one shared secret key
Symmetric encryption uses a single (the same) secret key to both encrypt the plaintext and decrypt the ciphertext. Mark-scheme operation: the sender turns plaintext into ciphertext with the key, transmits it, and the receiver uses the same key to turn it back into plaintext. Its main weakness is key distribution — the shared key must itself be sent securely, and if intercepted during that exchange an attacker can decrypt everything.
Asymmetric: public + private key pair
Asymmetric encryption uses two related keys — a public key and a private key — forming a matched pair. The public key is shared freely; the private key is kept secret. Data encrypted with the public key can only be decrypted with the matching private key. So a sender encrypts with the recipient public key; only the recipient private key can decrypt it. This removes the symmetric key-distribution weakness — the public key can be shared openly.
Drawn from real examiner reports.
Asymmetric keys without their roles
For asymmetric encryption, naming "public and private keys" is not enough. State that they form a matched pair and say which key does what: the public key encrypts and only the matching private key decrypts. To send confidentially, the sender encrypts with the recipient public key.
Firewall/password instead of encryption
When a question asks what keeps data safe during / mid-transmission, weak answers give a firewall or a password. A firewall controls traffic entering or leaving a network; it does not protect data as it travels across the network. Encryption protects the content of data in transit. Treat "during transmission" as the cue for encryption.
November 2023 Paper 1: "The most common incorrect answer was firewall; however, a firewall cannot help keep the data safe mid-transmission."
Plaintext and ciphertext swapped
Do not swap the two terms. Plaintext is the original, readable data before encryption; ciphertext (cypher text) is the scrambled, unreadable data after encryption. Decryption turns ciphertext back into plaintext. A definition that reverses these — calling the scrambled output plaintext — loses the definition mark.
Encryption vs error detection
Keep encryption separate from error detection (parity, checksum, check digit). Encryption is about security / confidentiality — making intercepted data unreadable. Error detection is about accuracy — spotting whether bits were corrupted in transmission. They solve different problems; do not offer one where the question asks for the other.
Encryption does not stop data being stolen
A common misconception is that encryption prevents data being stolen or intercepted. It does not: data can still be intercepted or copied. Encryption only makes the intercepted data meaningless without the key. Write about protecting the data once intercepted, not preventing interception. Mark-scheme form: "if intercepted the data is meaningless without the key".
November 2022 Paper 2: "Many candidates understood the data would be meaningless if stolen. Candidates had a common misconception that it stops the data from being stolen."
Vague symmetric description (name the key)
Asked to describe how symmetric encryption works, vague answers earn only the easy mark (plaintext turned into ciphertext) and miss the key marks. Name the single shared secret key used at both ends: the sender encrypts the plaintext with it, and the receiver uses the same key to decrypt. Use the precise key terminology.
November 2022 Paper 2: "Few candidates demonstrated a detailed understanding of the operation of symmetric encryption. The most frequent marks awarded were for understanding that plain text is encrypted into cypher text."
Use a key-named answer scaffold
For "describe how X encryption works": (1) name the key(s) — symmetric = one shared secret key, asymmetric = a public + private key pair; (2) encrypt plaintext into ciphertext; (3) decrypt — symmetric uses the same key, asymmetric the private key.
Use exact terms and the question context
Use the exact technical terms — plaintext, ciphertext, public key, private key — examiners reward this vocabulary and penalise woolly phrasing. Then anchor each point to the context in the question (online banking, email, a login) rather than answering in the abstract.
Asymmetric confidential send: which key?
For a confidential message with asymmetric encryption: the sender encrypts with the recipient public key, and only the recipient decrypts with their private key. Without the private key an interceptor sees only meaningless ciphertext.
When data travels across a network it can be intercepted. Encryption is the defence that makes intercepted data useless. This topic asks you to know why encryption is needed and how it works using symmetric and asymmetric keys.
Cambridge mark schemes reward precise, two-element definitions. Learn these exactly:
Full notes, flashcards, Q&A and the topic quiz for every premium subject.
Premium plans are US$8.99/month or US$49.99/year — first month free.
Studying with a parent's blessing? Show them this.
