
Professor Nasir Memon says it isn’t cryptography’s fault that we worry about Internet security. How are we able to shop online securely? That’s the question of an article on Scienceline.com featuring the expertise of Professor Nasir Memon, Director of Poly’s Information Systems and Internet Security Lab.
There’s a three-word answer to the question: public key cryptography. This “allows anyone to scramble a message (like credit card information) to an intended party, but it lets only that party unscramble it.” As the article points out though, “If this kind of cryptography is so great, why are we still worried about Internet security?” Nasir explains why in this excerpt from the article by Rachel Mahan:
It isn’t cryptography’s fault, says Nasir Memon, a computer science professor and director of Polytechnic University’s Information Systems and Internet Security Lab in Brooklyn.
Memon says it’s like we have nice locks on a cardboard house. He maintains that problems can occur if our information isn’t stored securely once it gets to its destination, if the technology isn’t applied properly or even if we don’t know how to protect ourselves.
Although public key cryptography isn’t the whole story of online security, it is an important component.
Here’s how Memon describes encryption and decryption: Say a professor has 30 students who want to communicate privately with him. He can put up 30 mailboxes outside his office, each locked with a combination for each student, but then he has to remember 30 combinations. This is called private key cryptography — both sides know and agree on a way to encrypt and decrypt the message.
Instead, he could leave a box of unlocked locks next to the open mailboxes. All of these locks require the same combination. This way, every student can lock up a secure message, but the professor is still the only one who can open any of them, and he has only one combination to remember. This is public key cryptography — anyone can encrypt the message to a recipient, but only the recipient can decrypt it.