Modern cryptography is difficult to understand without illustrations. One of the reason is, modern cryptography involves very large numbers that easily exceed the capacity of a standard calculator, let alone human comprehension. There are some illustrations out there using small numbers. The problem is, the numbers are too small to be convincing. So I’d like to try some no-so-small numbers here. Most of the necessary calculations can be done with GNU bc, so you can try yourself on just any GNU Linux distribution.
Let’s say Bob wants to send the below number to Alice (and make sure only Alice can decrypt the message):
Here’s what Alice will do first:
- Pick up two distinct prime numbers. The numbers should be sufficiently large so that brutal force is difficult. Here we choose p=37 and q=71.
- Calculating n=pq=37*71=2627.
- Calculating the n‘s totient function: phi(n)=(p-1)*(q-1)=2520.
- Pick a number e between 1 and phi(n) that is co-prime with phi(n). Here we choose 13.
- Find number d so that e*d mod (phi(n)) =1. Here we choose 1357. This step cannot be done with bc. Intead, you can try this online calculator. Just put “modinv(13,2520)” in the text field and then press “go” you’ll get the result.
Now Alice has a public key (n=2627, e=13) and a private key (n=2627, d=1357). She can simply distribute her public key to everyone, including Bob.
Now for Bob to encrypt the message 520 to Alice, he has to encrypt the message using Alice’s public key:
520^13 % 2627 = 2235
Now Alice received this number 2235 from Bob. In order to decrypt this message, she do the following calculation(using her private key):
2235^1357 % 2627 = 520
Actually, here Bob can encrypt just any number that is less than or equal to n=2627 in this way.
1^13 % 2627 = 1
1^1357 % 2627 = 1
2^13 % 2627 = 311
311^1357 % 2627 = 2
3^13 % 2627 = 2361
2361^1357 % 2627 = 3
4^13 % 2627 = 2149
2149^1357 % 2627=4
137^13 % 2627 = 2431
2431^1357 % 2627 = 137
If his message is large, then he has to split his message into chunks that are smaller than n and encrypt them one by one.
Note that this only illustrates how Bob can send secrete messages to Alice. If Alice wants to send secrete messages to Bob then she has to have Bob do the same first:
- Pick up 2 sufficiently large prime numbers;
- Get the product of these 2 prime numbers – This is part of the keys;
- Get the totient of this product;
- Pick a number that is co-prime with this totient but smaller – This combined with the product is the public key;
- Find the number that is the multiply modular inverse of this number – This combined with the product is the private key;
Then Bob sends his public key to Alice and Alice can encrypt the messages using Bob’s public key. Upon receiving the messages, Bob can decrypt the messages using his private key.