📚 Symmetric and Asymmetric Encryption | 对称加密与非对称加密
Encryption is the backbone of digital security, transforming readable data into an unreadable format to protect it from unauthorised eyes. In the IGCSE Computer Science syllabus, symmetric and asymmetric encryption are two fundamental methods that keep our messages, transactions and logins safe. Understanding their differences, strengths and weaknesses is crucial for any student exploring how modern communication works.
加密是数字安全的基石，它将可读数据转换为不可读的格式，以保护数据不被未经授权的人查看。在IGCSE计算机科学课程中，对称加密与非对称加密是两种保护信息、交易和登录安全的基本方法。理解它们之间的区别、优缺点对于任何探索现代通信原理的学生来说都至关重要。
1. What is Encryption? | 什么是加密？
Encryption is the process of scrambling plaintext (readable data) into ciphertext (unreadable data) using an algorithm and a secret key. Only someone with the correct key can decrypt the ciphertext back into plaintext. The goal is to ensure confidentiality, meaning that even if the data is intercepted, it cannot be understood without the key.
加密是使用算法和密钥将明文（可读数据）加扰成密文（不可读数据）的过程。只有持有正确密钥的人才能将密文解密回明文。其目标是确保机密性，也就是说，即使数据被截获，没有密钥也无法理解其内容。
Modern encryption relies on two main families: symmetric encryption, where the same key locks and unlocks the data, and asymmetric encryption, which uses a pair of mathematically linked keys – one public and one private. These form the foundation of secure internet protocols like HTTPS.
现代加密主要依赖两大类型：对称加密，使用同一个密钥来加密和解密数据；非对称加密，使用一对数学上相关联的密钥——一个公钥和一个私钥。这些构成了HTTPS等安全互联网协议的基础。
2. Symmetric Encryption Explained | 对称加密详解
In symmetric encryption, a single shared key is used for both encrypting and decrypting information. The sender uses the key to encrypt the plaintext, and the receiver uses the exact same key to reverse the process. This method is sometimes called secret-key encryption because the key must be kept confidential between the two parties.
在对称加密中，使用一个共享密钥进行信息的加密和解密。发送方使用该密钥加密明文，接收方使用完全相同的密钥执行逆过程。这种方法有时被称为密钥加密，因为密钥必须在双方之间保密。
Common symmetric algorithms include AES (Advanced Encryption Standard), which is widely adopted worldwide, and the older DES (Data Encryption Standard). These algorithms are designed to be extremely fast and efficient, capable of encrypting large volumes of data with minimal processing overhead.
常见的对称加密算法包括全球广泛采用的AES（高级加密标准）和较旧的DES（数据加密标准）。这些算法设计得极为快速高效，能够以最小的处理开销加密大量数据。
Imagine a locked box: you and your friend share an identical physical key. You place your message inside, lock the box with that key, and send it. Your friend uses their copy of the key to open the box. The strength of the security depends entirely on keeping that single key safe from everyone else.
想象一个带锁的箱子：你和朋友共享一把完全相同的物理钥匙。你把信息放进去，用那把钥匙锁好箱子，然后寄送出去。你的朋友用他们那把复制的钥匙打开箱子。这种安全性的强弱完全取决于那把唯一的钥匙不被其他任何人获取。
3. How Symmetric Encryption Works | 对称加密的工作原理
Symmetric encryption transforms plaintext using a mathematical function together with the secret key. The process can be represented simply:
对称加密通过数学函数结合密钥来转换明文。该过程可以简单表示为：
C = E(K, P) and P = D(K, C)
where C is ciphertext, P is plaintext, K is the key, E is the encryption algorithm, and D is the decryption algorithm. The same key K steers both operations. The security does not rely on keeping the algorithm secret; it relies entirely on keeping the key secret. This is known as Kerckhoffs's principle.
其中 C 代表密文，P 代表明文，K 代表密钥，E 为加密算法，D 为解密算法。同一个密钥 K 主导两种操作。安全性不依赖于对算法的保密，而完全依赖于对密钥的保密。这被称为柯克霍夫原则。
Symmetric ciphers can be stream ciphers, which encrypt data bit by bit, or block ciphers, which encrypt data in fixed-size blocks (e.g. 128 bits). AES operates on blocks and uses key lengths of 128, 192, or 256 bits. The longer the key, the more resistant the encryption is to brute-force attacks, where an attacker tries every possible key.
对称密码可以是流密码，逐位加密数据；也可以是分组密码，以固定大小的块（例如128位）加密数据。AES以分组方式运作，使用128位、192位或256位的密钥长度。密钥越长，加密对暴力破解攻击（攻击者尝试所有可能密钥）的抵抗力就越强。
4. Advantages and Disadvantages of Symmetric Encryption | 对称加密的优缺点
• Speed: Symmetric algorithms are computationally light and very fast, making them ideal for encrypting large amounts of data, such as files, databases, and real-time communications.
• 速度： 对称算法计算量小且速度极快，非常适合加密大量数据，如文件、数据库和实时通信。
• Simple model: The concept is straightforward – one key locks and unlocks. This simplicity often means fewer chances for implementation errors.
• 模型简单： 概念直截了当——一把钥匙既锁又开。这种简单性通常意味着实施出错的机会更少。
• Key distribution problem: The biggest weakness is securely sharing the secret key with the intended recipient. If the key is intercepted during transmission, all encrypted messages can be read. In a network of many users, managing unique keys for every pair of users becomes hugely complex.
• 密钥分发问题： 最大的弱点是安全地与指定接收方共享密钥。如果密钥在传输过程中被截获，所有加密信息都可能被读取。在用户众多的网络中，为每一对用户管理唯一的密钥变得极为复杂。
• Lack of non-repudiation: Because both parties share the same key, it is impossible to prove which one created a particular ciphertext. Symmetric encryption alone cannot provide digital signatures or authentication proof of origin.
• 缺乏不可否认性： 因为双方共享同一密钥，无法证明是谁创建了某段密文。单靠对称加密无法提供数字签名或来源验证。
5. Understanding Asymmetric Encryption | 理解非对称加密
Asymmetric encryption, also called public-key cryptography, uses a pair of mathematically related keys: a public key and a private key. The public key can be freely shared with anyone, while the private key must be kept strictly secret by its owner. Data encrypted with the public key can only be decrypted with the corresponding private key, and vice versa.
非对称加密，又称公钥密码体制，使用一对数学上相关联的密钥：公钥和私钥。公钥可以自由分享给任何人，而私钥必须由其所有者严格保密。用公钥加密的数据只能用对应的私钥解密，反之亦然。
This two-key system solves the key distribution nightmare of symmetric encryption. You no longer need a secure channel to agree on a single key beforehand. Instead, anyone can grab your public key, encrypt a message, and only you with your private key can read it.
这种双密钥系统解决了对称加密中密钥分发的噩梦。你不再需要预先通过安全信道约定统一的密钥。相反，任何人都可以获取你的公钥，加密一条消息，而只有拥有私钥的你才能读取它。
The most famous asymmetric algorithm is RSA (Rivest–Shamir–Adleman), whose security is based on the practical difficulty of factoring the product of two large prime numbers. Another widely used system is ECC (Elliptic Curve Cryptography), which offers equivalent security with shorter keys, making it popular in mobile devices.
最著名的非对称算法是RSA（Rivest–Shamir–Adleman），其安全性基于对大整数进行因式分解的实际困难性。另一个广泛使用的系统是ECC（椭圆曲线密码学），它能以更短的密钥提供同等的安全性，因此在移动设备中很受欢迎。
6. How Asymmetric Encryption Works: Public and Private Keys | 非对称加密的工作原理：公钥与私钥
Every user generates a key pair. The public key is published openly – on a website, in an email signature, or via a key server. The private key never leaves the owner's device and is often protected by a passphrase. When Alice wants to send a confidential message to Bob, she encrypts it with Bob’s public key. Only Bob can decrypt it with his private key.
每个用户生成一个密钥对。公钥公开发布——在网站、电子邮件签名或通过密钥服务器。私钥则从不离开所有者的设备，并且通常由口令短语保护。当Alice想向Bob发送机密消息时，她用Bob的公钥加密该消息。只有Bob能用他的私钥解密。
Because the keys are mathematically linked but deducing the private key from the public key is computationally infeasible, this system is secure as long as the private key is kept safe. The core operations involve one-way functions – easy to perform in one direction but practically impossible to reverse without the additional private information.
由于密钥在数学上相关联，但从公钥推导出私钥在计算上是不可行的，因此只要私钥安全保管，系统就是安全的。核心操作涉及单向函数——朝一个方向计算很容易，但没有额外的私有信息几乎不可能逆向。
Asymmetric encryption also enables digital signatures: Bob can encrypt a hash of a message with his private key; anyone with his public key can decrypt it and verify that the message came from Bob and was not tampered with. This provides authentication and non-repudiation, features absent in symmetric encryption.
非对称加密还能实现数字签名：Bob可以用他的私钥加密消息的哈希值；任何持有他公钥的人都可以解密并验证消息确实来自Bob且未被篡改。这提供了身份验证和不可否认性，这些特性是对称加密所不具备的。
7. Advantages and Disadvantages of Asymmetric Encryption | 非对称加密的优缺点
• No key distribution problem: Public keys can be exchanged openly over any channel. There is no need for a prior secure meeting or trusted courier to share a secret key.
• 无密钥分发问题： 公钥可以通过任何渠道公开交换。无需预先进行安全会面或由可信信使传递密钥。
• Digital signatures and authentication: The ability to sign messages proves the identity of the sender and ensures message integrity. This is vital for legal documents, software distribution, and cryptocurrency transactions.
• 数字签名和身份验证： 对消息进行签名的能力可以证明发送者的身份并确保消息完整性。这对于法律文件、软件分发和加密货币交易至关重要。
• Scalability: In a network of n users, only n key pairs are needed, whereas symmetric systems would require n(n–1)/2 unique shared keys. Asymmetric encryption scales far better for public systems like the internet.
• 可扩展性： 在有 n 个用户的网络中，只需要 n 个密钥对，而对称系统则需要 n(n–1)/2 个唯一的共享密钥。对于互联网这样的公共系统，非对称加密的扩展性要好得多。
• Slower performance: Asymmetric algorithms involve complex mathematics and are significantly slower than symmetric ones. Encrypting large volumes of data directly with RSA is impractical.
• 性能较慢： 非对称算法涉及复杂的数学运算，速度远比对称算法慢。直接用RSA加密大量数据是不切实际的。
• Larger key sizes: To achieve comparable security, asymmetric keys are typically much longer (e.g. 2048-bit RSA vs. 128-bit AES). This increases storage and transmission overheads.
• 密钥尺寸更大： 要达到类似的安全性，非对称密钥通常要长得多（例如2048位RSA对比128位AES），这增加了存储和传输开销。
8. Comparing Symmetric and Asymmetric Encryption | 对称加密与非对称加密的比较
The table below highlights the key differences between the two encryption paradigms. Remembering these distinctions is often essential for IGCSE examination questions.
下表重点展示两种加密模式之间的主要区别。记住这些区别对于应对IGCSE考试题目通常是必要的。
| Feature | 特点 | Symmetric | 对称加密 | Asymmetric | 非对称加密 |
|---|---|---|
| Number of keys | 密钥数量 | 1 shared secret key | 1个共享密钥 | 2 keys: public and private | 2个密钥：公钥和私钥 |
| Key distribution | 密钥分发 | Difficult; must be secure | 困难；必须安全 | Easy; public key can be open | 容易；公钥可以公开 |
| Speed | 速度 | Fast | 快 | Slow | 慢 |
| Main use | 主要用途 | Bulk data encryption | 批量数据加密 | Key exchange, digital signatures | 密钥交换、数字签名 |
| Key length (typical) | 密钥长度（典型） | 128, 192, 256 bits | 位 | 2048, 4096 bits (RSA) | 位 |
| Authentication | 身份验证 | Difficult to achieve alone | 难以单独实现 | Built-in via digital signatures | 通过数字签名内置 |
| Examples | 示例 | AES, DES, Blowfish | RSA, ECC, ElGamal |
9. Real-World Applications and Hybrid Encryption | 实际应用与混合加密
In practice, pure symmetric or pure asymmetric encryption is rarely used alone. Modern secure systems combine the two in a hybrid approach to exploit their strengths. For example, when you visit a secure website (HTTPS), your browser and the server use asymmetric encryption only during the initial handshake to agree on a temporary symmetric key, called a session key. Once exchanged, that fast symmetric key encrypts the rest of the session’s data.
在实践中，纯粹的对称加密或非对称加密很少单独使用。现代安全系统将两者结合成混合方法，以发挥各自的优势。例如，当你访问一个安全网站（HTTPS）时，你的浏览器和服务器仅在初始握手中使用非对称加密来协商一个临时的对称密钥，称为会话密钥。一旦交换完毕，那个快速的对称密钥就用于加密会话中的其余数据。
This hybrid model is the essence of protocols like TLS (Transport Layer Security). It solves the key distribution problem using asymmetric cryptography and then hands over the heavy lifting of bulk encryption to a fast symmetric cipher. Other applications include encrypted email (e.g. PGP, which encrypts the email body with a symmetric key and encrypts that key with the recipient’s public key) and end-to-end encrypted messaging apps.
这种混合模型是TLS（传输层安全）等协议的精髓所在。它利用非对称密码学解决密钥分发问题，然后将批量加密的繁重工作交给快速的对称密码。其他应用包括加密电子邮件（例如PGP，它使用对称密钥加密邮件正文，再用接收者的公钥加密该密钥）以及端到端加密的即时通讯应用。
Digital signatures continue to use asymmetric keys to verify software downloads, sign blockchain transactions, and authenticate users. The balance between the two encryption types is what makes the internet both secure and fast enough for everyday use.
数字签名继续使用非对称密钥来验证软件下载、签署区块链交易和认证用户。两种加密类型之间的平衡使得互联网既安全又足够快速，满足日常使用需求。
10. Conclusion | 结论
Symmetric and asymmetric encryption are not competitors but partners in cybersecurity. Symmetric encryption offers high speed and efficiency for bulk data but struggles with key distribution. Asymmetric encryption elegantly solves the key distribution and authentication puzzle but is too slow for massive data sets. Knowing their differences, and more importantly, how they work together in hybrid systems, is a foundational concept in IGCSE Computer Science and essential for understanding how our digital world stays private and trustworthy.
对称加密和非对称加密不是竞争对手，而是网络安全中的合作伙伴。对称加密为批量数据提供高速和高效率，但在密钥分发上存在困难。非对称加密巧妙地解决了密钥分发和身份验证难题，但对于海量数据来说速度太慢。了解它们的区别，更重要的是了解它们如何在混合系统中协同工作，是IGCSE计算机科学的基础概念，也是理解数字世界如何保持隐私与可信的关键。
Published by TutorHao | Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
或截图后用「扫一扫 → 相册」选择本图