Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

What is null key encryption? [closed]

Tags:

encryption

In the movie Dark Knight, the Batman builds some ultra powerful sonar monitoring system and encrypts it with "Null Key Encryption".

I was reading RFC 2410 but couldn't comprehend it. It says something like this:

However there are cases when only authentication and integrity protection is required, and confidentiality is not needed or not permitted.

And in the end, the Batman says to another character:

Type in your name when you are finished.

If it's that simple, why encrypt it?

like image 230
Ravi Gupta Avatar asked Feb 04 '10 09:02

Ravi Gupta


People also ask

What is an encryption key and what is it used for?

An encryption key is typically a random string of bits generated specifically to scramble and unscramble data. Encryption keys are created with algorithms designed to ensure that each key is unique and unpredictable. The longer the key constructed this way, the harder it is to break the encryption code.

Is public key encryption end to end?

End-to-end encryption uses public key cryptography, which stores private keys on the endpoint devices. Messages can only be decrypted using these keys, so only people with access to the endpoint devices are able to read the message.

What is KEK key encryption key?

Definition(s): A key that encrypts other key (typically Traffic Encryption Keys or TEKs) for transmission or storage. The key for the underlying block cipher of KW, KWP, or TKW.


2 Answers

There is no Null Key Encryption. It is just plain fiction.

The RFC you linked is a... fun RFC? The Null Algorithm described there is indeed a very very powerful algorithm. It encrypts your plaintext

Hello World 

To the ciphertext

Hello World 

I heavily doubt this algorithm will ever be broken :-)

like image 51
Leo Avatar answered Sep 23 '22 10:09

Leo


You must understand the context. This is meant for IPSec, other parts of IPSec provide integrity (nobody can change the data that's in transit), and authentication (certainty about who sent the data), and an encryption scheme provides confidentiality (only the intended recipient can read the data).

In some situations, IPSec may be used for Integrity and Authentication, but not Confidentiality (some situations may prohibit encryption). You can then configure IPSec with a null key encryption mechanism. This way you still get two out of three benefits of IPSec: Nobody can mess with your message in-transit, and the communicating parties are certain about who they are talking to.

Of course, if Batman was trying to keep the data secret in the movie, it was probably just an obscure joke/easter egg aimed at people who know what the Null Key encryption is.

like image 32
Terion Avatar answered Sep 19 '22 10:09

Terion