Public Key Cryptography Basics: A Beginner-Friendly Guide

Cryptography plays a vital role in keeping our digital world secure. Every time you browse a website, log into a server, or send an encrypted email, cryptography is working behind the scenes.

In this article, we’ll explore the basics of public key cryptography (asymmetric encryption) and understand how technologies like RSA, Diffie-Hellman, SSH, SSL/TLS certificates, and GPG help secure communication online.

---

What Is Cryptography?

Cryptography is the science of securing communication in the presence of third parties. It ensures four important security principles:

• Confidentiality – Only authorized parties can access information.

• Integrity – Data cannot be altered without detection.

• Authentication – You can verify who you are communicating with.

• Authenticity – You can confirm that a message truly came from the claimed sender.

There are two main types of cryptography:

• Symmetric Encryption (private key)

• Asymmetric Encryption (public key)

This article focuses on asymmetric cryptography.

---

1. What Is Asymmetric Encryption?

Asymmetric encryption uses two keys:

• A Public Key (shared with everyone)

• A Private Key (kept secret)

If someone encrypts data using your public key, only your private key can decrypt it.

Why Is This Important?

It allows secure communication even over insecure networks like the internet.

However, asymmetric encryption is slower than symmetric encryption. So in real-world systems, it is mainly used to:

• Exchange symmetric keys securely

• Create digital signatures

• Verify identity

---

2. RSA (Rivest–Shamir–Adleman)

RSA is one of the most widely used public key algorithms.

How RSA Works (Simple Explanation)

RSA security is based on a mathematical concept:

Multiplying two large prime numbers is easy.
Factoring their product back into the original primes is extremely difficult.

This mathematical difficulty makes RSA secure.

RSA Key Components

• p and q – Large prime numbers

• n – Product of p × q

• e – Public exponent

• d – Private exponent

• m – Plaintext message

• c – Ciphertext

RSA is commonly used in:

• SSL/TLS certificates

• SSH authentication

• Digital signatures

---

3. Diffie-Hellman Key Exchange

Diffie-Hellman is used to securely agree on a shared secret key over an insecure channel.

Unlike RSA, Diffie-Hellman is mainly used for key exchange, not encryption itself.

Why It Matters

It allows two parties to:

• Generate a shared secret

• Without transmitting the secret directly

• Even if someone is listening to the communication

This shared secret is then used for fast symmetric encryption.

Diffie-Hellman is commonly used in:

• HTTPS connections

• VPNs

• Secure messaging systems

---

4. SSH and Public Key Authentication

Secure Shell (SSH) allows secure remote login to servers.

When you connect to a server via SSH:

1. The server proves its identity using a public key.

2. Your system verifies the server’s fingerprint.

3. You authenticate using:

   • Password, or

   • SSH key pair (recommended)

SSH Key Types

Common SSH algorithms include:

• RSA

• ECDSA

• Ed25519

Private SSH keys must always be protected. They function similarly to passwords but provide stronger security.

---

5. Digital Signatures

Digital signatures prove:

• Who created a message

• That the message has not been altered

How Digital Signatures Work

1. A hash of the message is created.

2. The sender encrypts the hash using their private key.

3. The receiver verifies it using the sender’s public key.

Digital signatures are widely used in:

• Software updates

• Email security

• Legal digital documents

• SSL/TLS certificates

---

6. Certificates and HTTPS

When you visit a secure website (HTTPS), the server presents a TLS certificate.

This certificate:

• Contains the server’s public key

• Is signed by a trusted Certificate Authority (CA)

• Proves the website’s identity

Browsers trust websites because they trust recognized CAs.

You can even get free TLS certificates from:

• Let’s Encrypt

This makes HTTPS accessible to everyone.

---

7. PGP and GPG

PGP (Pretty Good Privacy) and GPG (GNU Privacy Guard) are tools used for:

• Encrypting emails

• Digitally signing messages

• Protecting sensitive files

With GPG:

• You generate a public/private key pair

• Share your public key

• Keep your private key secure

It is commonly used by:

• Developers

• Security professionals

• Privacy-conscious users

---

8. Understanding Common Attack Methods

In cybersecurity, it's important to understand defensive and analytical concepts such as:

Brute-Force Attack

Trying every possible password combination.

Dictionary Attack

Trying common words from a list instead of every possible combination.

Understanding these concepts helps improve password policies and system security.

---

Final Thoughts

Public key cryptography is the backbone of modern internet security.

It powers:

• HTTPS

• Secure email

• SSH logins

• Digital signatures

• Secure file sharing

By understanding RSA, Diffie-Hellman, SSH keys, digital signatures, and certificates, you build a strong foundation in cybersecurity.

If you're learning cybersecurity, mastering these concepts is essential before moving on to hashing and advanced cryptographic systems.