{"id":2081,"date":"2023-04-05T14:27:57","date_gmt":"2023-04-05T14:27:57","guid":{"rendered":"https:\/\/dev.hypersense-software.com\/blog\/?p=2081"},"modified":"2024-09-10T16:13:21","modified_gmt":"2024-09-10T13:13:21","slug":"demystifying-end-to-end-encryption-a-simplified-introduction-to-elliptic-curve-diffie-hellman","status":"publish","type":"post","link":"https:\/\/hypersense-software.com\/blog\/2023\/04\/05\/demystifying-end-to-end-encryption-a-simplified-introduction-to-elliptic-curve-diffie-hellman\/","title":{"rendered":"Demystifying End-to-End Encryption: A Simplified Introduction to Elliptic-Curve Diffie-Hellman"},"content":{"rendered":"\n

End-to-end encryption is a critical security measure that ensures only authorized users can access specific information, providing a secure way to transmit data over an unsecured channel, such as the internet. In this context, a “user” can refer to a person or a server.<\/p>\n\n\n\n

As society’s concern for security extends to the online environment, it becomes crucial to protect sensitive information from unauthorized access and even from the applications handling the data. End-to-end encryption should be incorporated into all modern applications and websites. This encryption method ensures robust security by fully encrypting communication between individual devices, allowing only the device users with the decryption keys to read the encrypted data. One popular example is WhatsApp, which offers users the option to verify keys to ensure communication integrity.<\/p>\n\n\n

Cutting-Edge Custom Software Development for Your Success<\/p>

Create Software That Meets Your Specific Requirements<\/p>Explore Custom Software<\/a><\/div><\/div><\/div>\n\n\n\n

A vital aspect of information protection is password handling, where applications store the result of a mathematical function rather than the password itself. Another area where end-to-end encryption should be employed is in chat and social media applications.<\/p>\n\n\n\n

In this article, we will discuss the Elliptic-curve Diffie-Hellman (ECDH) encryption method and provide a simplified explanation for non-developers. It’s essential to be aware of how your applications and websites protect users’ data. If you have any questions, please feel free to contact us<\/strong><\/a>.<\/p>\n\n\n

\n
\"cryptography<\/figure>\n<\/div>\n\n\n

The mathematics of encryption<\/h2>\n\n\n\n

The key to a secure system lies in the functions applied, which possess mathematical properties like injectivity, surjectivity, and bijectivity. Injective and pseudo-injective functions are used to store data when the original data value is not essential, such as in passwords. Bijectivity is crucial when preserving the original information, like in message transmission.<\/p>\n\n\n\n

Injectivity is defined as:<\/p>\n\n\n\n

a function f:A\u2192B, f(x) \u2260f(y) \u2200 x,y \u2208 A, x \u2260 y<\/strong><\/p>\n\n\n\n

Surjectivity is defined as:<\/p>\n\n\n\n

a function f:A\u2192B, \u2200 y \u2208 B \u21d2 \u2203 x \u2208 A, f(x) =y<\/strong><\/p>\n\n\n\n

A function that is both injective and surjective is called bijective, and is described as:<\/p>\n\n\n\n

f:A\u2192B, \u2200  y \u2208 B \u21d2\u2203! x \u2208 A, f(x) =y<\/strong>  <\/p>\n\n\n

\n
\"Surjectivity,<\/figure>\n<\/div>\n\n\n

Injectivity isn\u2019t a mandatory requirement. In computer science, often, if the probability of an event is low (ex: 1 in 100 mil) it can be treated as non-existent. This can be observed especially when dealing with prime and pseudoprime numbers (https:\/\/en.wikipedia.org\/wiki\/Pseudoprime<\/a>). There are a lot of fakes in programming.<\/p>\n\n\n\n

Surjectivity isn\u2019t important by itself. The critical point however, is whether a function is bijective and bijectivity is related to the existence of an inverse function.<\/p>\n\n\n\n

All bijective functions have an inverse. This means that for all bijective functions,<\/p>\n\n\n\n

f:A \u2192 B, \u2203 g: B \u2192 A, g(f(x)) =x \u2200 x \u2208 A<\/strong><\/p>\n\n\n\n

Bijectivity, however, is required when the original information is important. A relevant example of bijectivity is the sending of messages, where the original message is important.<\/p>\n\n\n\n

In summary, a secure system depends on applying functions with mathematical properties such as injectivity, surjectivity, and bijectivity. Injective and pseudo-injective functions like passwords are utilized for data storage when the original value isn’t crucial. Conversely, as in message transmission, bijectivity is vital for retaining original information.<\/p>\n\n\n\n

Example of end-to-end encryption<\/h2>\n\n\n\n

A straightforward example of end-to-end encryption involves John and Mary exchanging a secure message, where the message is locked and unlocked using their respective locks and keys:<\/p>\n\n\n\n