Encryption — AQA 8525

What Is Encryption?

Encryption is the process of converting readable data (plaintext) into an unreadable form (ciphertext) using an algorithm and a key. Only someone with the correct key can reverse the process (decrypt) and recover the original data.

Plaintext

+🔑→

Encrypt

→

Ciphertext

+🔑→

Decrypt

→

Plaintext

Encryption does not prevent data from being intercepted — it ensures that even if someone intercepts the data, they cannot read it without the key.

Why Encryption Matters

Encryption protects data in two situations:

Data in transit: data being sent over a network (e.g. logging into a website, sending an email)
Data at rest: data stored on a device (e.g. encrypted hard drives, encrypted database records)

Examples of where encryption is used: online banking, HTTPS web connections, WhatsApp messages, password storage in databases, healthcare records.

Caesar Cipher — A Simple Example

The Caesar cipher is a simple substitution cipher. Each letter is shifted a fixed number of positions down the alphabet. The shift value is the key.

Plaintext: H E L L O

Shift key: +3

Ciphertext: K H O O R

A→D, B→E, ..., H→K, E→H, L→O, O→R (wraps: X→A, Y→B, Z→C)

Weakness of Caesar Cipher

The Caesar cipher has only 25 possible keys (shifts of 1–25). An attacker can try all 25 combinations in seconds — this is called a brute-force attack. It is far too weak for modern use and is only used as an educational example.

Symmetric Encryption

In symmetric encryption, the same key is used to both encrypt and decrypt the data.

Advantage	Disadvantage
Fast and efficient for large amounts of data	The key must be shared securely — if intercepted, the attacker can decrypt everything
Simple to implement	Key distribution is a major problem

Examples: AES (Advanced Encryption Standard), used for encrypted files, WPA2 Wi-Fi.

Asymmetric Encryption

In asymmetric encryption, two keys are used: a public key and a private key.

The public key is freely shared. Anyone can use it to encrypt a message.
The private key is kept secret. Only the owner can use it to decrypt messages encrypted with the public key.

Advantage	Disadvantage
No need to share a secret key — the public key can be distributed openly	Slower than symmetric encryption
Used for secure key exchange and digital signatures	More computationally expensive

Examples: RSA, used in HTTPS and email encryption. When you connect to a website over HTTPS, asymmetric encryption is used to securely exchange a symmetric key, then symmetric encryption handles the actual data transfer.

Encryption in Practice — HTTPS

When you visit a website with HTTPS (the padlock in the browser), encryption is protecting your data. The process uses both asymmetric encryption (for the initial handshake and key exchange) and symmetric encryption (for the data transfer), combining the security benefits of both.

Exam tip: Know the key vocabulary: plaintext, ciphertext, key, encrypt, decrypt, symmetric, asymmetric. A common exam question is to distinguish symmetric (same key) from asymmetric (public/private key pair) encryption. The Caesar cipher is a useful illustrative example — know how to apply a shift.

⚠️ Common Mistakes

Saying encryption prevents data being intercepted — it doesn't; it prevents the data being READ by someone who intercepts it
Confusing symmetric and asymmetric: symmetric = one shared key; asymmetric = public + private key pair
Decrypting a Caesar cipher with the wrong shift direction — when decrypting, shift BACK (subtract) not forward

▶

Video coming soon

Key points

Encryption: plaintext → ciphertext using a key; decrypt with key to get plaintext back
Caesar cipher: shift each letter — only 25 keys, easily brute-forced
Symmetric encryption: same key for both ends — fast but key-sharing problem
Asymmetric: public key encrypts, private key decrypts — solves key distribution
HTTPS uses asymmetric to exchange a symmetric key, then symmetric for data

Click slide or press arrow keys to navigate

✍️

Worksheet — 3.3.9 Encryption

8 questions · 17 marks

Q1What is encryption? State what it converts and why.[2]

✅ Mark scheme

Mark scheme

Encryption converts plaintext into ciphertext (an unreadable form) [1]; so that even if data is intercepted, it cannot be read without the decryption key [1].

Q2Use a Caesar cipher with shift +4 to encrypt the word GCSE.[2]

✅ Mark scheme

Mark scheme

G→K, C→G, S→W, E→I [1 per pair, max 2]: KGWI [2].

Q3The ciphertext FRPSXWHU was encrypted with a Caesar cipher, shift +3. Decrypt it.[2]

✅ Mark scheme

Mark scheme

Shift back 3 (subtract 3): F→C, R→O, P→M, S→P, X→U, W→T, H→E, U→R [1]; answer = COMPUTER [1].

Q4State one weakness of the Caesar cipher.[1]

✅ Mark scheme

Mark scheme

Only 25 possible keys — an attacker can try all of them in seconds (brute-force attack) [1].

Q5Explain the difference between symmetric and asymmetric encryption.[2]

✅ Mark scheme

Mark scheme

Symmetric encryption uses the same key to both encrypt and decrypt data [1]; asymmetric encryption uses two different keys — a public key to encrypt and a private key to decrypt [1].

Q6Give one advantage and one disadvantage of symmetric encryption compared to asymmetric.[2]

✅ Mark scheme

Mark scheme

Advantage: faster/more efficient for large amounts of data [1]; Disadvantage: the shared key must be transmitted securely — if intercepted, the attacker can decrypt all data [1].

Q7In asymmetric encryption, explain how a sender uses the recipient's public key.[2]

✅ Mark scheme

Mark scheme

The sender uses the recipient's public key to encrypt the message [1]; only the recipient's private key can decrypt it, so only the recipient can read the message [1].

Q8A student argues "if a website uses HTTPS, encryption prevents hackers from intercepting my data." Evaluate this statement.[4]

✅ Mark scheme

Mark scheme

Partially correct: HTTPS uses TLS encryption and does protect data in transit [1]; encryption does NOT prevent interception — hackers can still intercept ciphertext [1]; but without the decryption key they cannot read the data [1]; however, if the device/server itself is compromised, data can be stolen before/after encryption, so encryption alone does not guarantee complete safety [1].

✓

Check your answers above.

Topic Quiz

Q 1 of 10

You scored

out of 10

Card 1 of 6

Click to flip

🎉

All done!

Term	Definition

🔒

Pro Content

Subscribe to unlock all AQA 8525 lessons, worksheets, quizzes and mini tests.

£7.99/month

or £59/year

Upgrade to Pro

What Is Encryption?

Why Encryption Matters

Caesar Cipher — A Simple Example

Weakness of Caesar Cipher

Symmetric Encryption

Asymmetric Encryption

Encryption in Practice — HTTPS

Key points

Worksheet — 3.3.9 Encryption

Mini Test — 3.3.9 Encryption