Symmetric Key Cryptography

Symmetric key cryptography is a method of encryption in which a single secret key is used both to lock and to unlock information. The sender turns readable data, called plaintext, into scrambled ciphertext using the key and an algorithm known as a cipher; the receiver uses the same key to reverse the process. It is the oldest form of cryptography and remains the workhorse of modern data protection, securing everything from web traffic and bank card data to phone storage and crypto wallet files.

Symmetric cryptography is usually contrasted with public-key cryptography, also called asymmetric cryptography, which uses a pair of related keys: one public and one private. Symmetric methods are much faster and need shorter keys for the same strength, but they raise a basic problem: how to get the shared key to the other party without anyone else seeing it. In practice, most secure systems combine the two, using public-key techniques to agree a key and symmetric encryption to protect the data itself.

Picture a lockbox with two identical keys. You put a letter inside, lock it and post the box. Your friend, who holds the second copy of the key, opens it at the other end. Anyone who intercepts the box in between sees only a locked box. The same key that locked it is the one that opens it, which is what "symmetric" means.

The weak point is the key itself. If you have to send the spare key through the post, a thief could copy it on the way. For centuries, people solved this by meeting in person or using trusted couriers. Today, computers solve it with a clever extra step, using a different kind of cryptography just to agree on the key, and then switching to the fast lockbox method for everything else.

Modern symmetric ciphers come in two main families:

• Block ciphers. These encrypt data in fixed-size chunks, or blocks. The most widely used is the Advanced Encryption Standard (AES), selected by the US National Institute of Standards and Technology in 2001 after a public competition, with keys of 128, 192 or 256 bits.
• Stream ciphers. These combine data with a continuous stream of pseudo-random bits generated from the key, which suits real-time communication. ChaCha20 is a widely used example.

Block ciphers are used with a mode of operation that determines how blocks are chained together. Modern modes such as Galois/Counter Mode also provide authentication, so that any tampering with the ciphertext is detected. The security of a well-designed cipher rests entirely on keeping the secret key private; the algorithm itself is public and has been studied by experts for years. Breaking AES with a 128-bit key by trying every possibility, a brute force attack, is far beyond the capacity of any existing computer.

Simple symmetric ciphers date back to antiquity, such as the substitution scheme attributed to Julius Caesar, in which each letter is shifted by a fixed number of places. Mechanical cipher machines such as the German Enigma in the Second World War were also symmetric. In 1977 the United States adopted the Data Encryption Standard (DES), which became the main cipher for banking and government systems. Its 56-bit key was eventually judged too short, and it was strengthened as Triple DES before being replaced by AES. Public-key cryptography, published by Whitfield Diffie and Martin Hellman in 1976, provided the solution to the key distribution problem that had always limited symmetric systems.

Symmetric encryption is embedded throughout financial systems. Card payment terminals encrypt PINs and card data with symmetric keys, often using schemes that derive a fresh key for each transaction, and banks protect master keys inside a hardware security module. Industry standards such as the Payment Card Industry Data Security Standard require strong encryption of stored and transmitted cardholder data. When customers use online banking, the session is protected by Transport Layer Security, which agrees a key with public-key methods and then encrypts traffic with a symmetric cipher such as AES.

In crypto, wallet software typically encrypts the stored private key or keystore file with a symmetric cipher, using a key derived from the user's password. Blockchains themselves rely mostly on public-key signatures and hash functions rather than symmetric encryption, since their data is meant to be public.

The main limitation is key management. Every pair of parties needs its own shared key, so the number of keys grows rapidly in large networks, and each must be generated, distributed, stored, rotated and eventually destroyed safely. Good practice includes regular key rotation. A stolen key exposes all data protected by it. Symmetric encryption alone also cannot prove who sent a message to a third party, since both sides hold the same key; that requires digital signatures. Looking ahead, quantum computing is expected to weaken symmetric ciphers less than public-key ones: known quantum algorithms would roughly halve the effective key length, which is why AES with 256-bit keys is generally considered safe for the long term.

• NIST Computer Security Resource Center