GCSE WJEC Computer Science: Encryption Exam Essentials | GCSE WJEC 计算机科学：加密考点精讲

📚 GCSE WJEC Computer Science: Encryption Exam Essentials | GCSE WJEC 计算机科学：加密考点精讲

Encryption is a fundamental topic in the GCSE WJEC Computer Science specification. It underpins modern data security, from online banking to private messaging. Understanding how encryption works, the difference between symmetric and asymmetric methods, and their real-world applications is essential for success in the exam. This revision guide breaks down every key concept, providing clear explanations in both English and Chinese, following the WJEC syllabus closely.

加密是 GCSE WJEC 计算机科学课程中的一个基本主题。它支撑着现代数据安全，从网上银行到私人信息传递。理解加密的工作原理、对称与非对称方法之间的区别及其实际应用，对于考试成功至关重要。这篇复习指南将每个关键概念分解开来，提供清晰的中英双语解释，紧密贴合 WJEC 考纲。

1. What is Encryption? | 什么是加密？

Encryption is the process of converting readable data, called plaintext, into an unreadable format known as ciphertext. This transformation uses an algorithm and a cryptographic key. Only someone who possesses the correct decryption key can reverse the process and recover the original plaintext. Encryption ensures confidentiality of data, meaning that even if an attacker intercepts the ciphertext, they cannot understand its content without authorisation.

加密是将可读数据（称为明文）转换为不可读格式（称为密文）的过程。这种转换使用算法和加密密钥。只有拥有正确解密密钥的人才能逆转该过程并恢复原始明文。加密确保了数据的机密性，这意味着即使攻击者截获了密文，未经授权也无法理解其内容。

2. Why Do We Need Encryption? | 为什么需要加密？

We need encryption to protect sensitive information both stored on devices and transmitted over networks. Examples include credit card details during online shopping, passwords, personal emails, and medical records. Without encryption, attackers could easily read, modify, or steal data, leading to fraud, identity theft, and severe privacy breaches. Encryption builds trust in digital systems and is a legal requirement under data protection regulations.

我们需要加密来保护存储在设备上以及通过网络传输的敏感信息。例子包括在线购物时的信用卡详细信息、密码、个人电子邮件和医疗记录。如果没有加密，攻击者很容易读取、修改或窃取数据，导致欺诈、身份盗窃和严重的隐私泄露。加密建立了对数字系统的信任，并且是数据保护法规中的法律要求。

3. Caesar Cipher: A Simple Symmetric Cipher | 凯撒密码：一种简单的对称密码

The Caesar cipher is a historical encryption technique and a classic example of symmetric encryption. It works by shifting each letter in the plaintext by a fixed number of positions down the alphabet. For example, with a shift of 3, ‘A’ becomes ‘D’, ‘B’ becomes ‘E’, and so on. The key is the shift value. Mathematically, encryption can be expressed as E(x) = (x + n) mod 26, where x is the letter’s position (A=0, B=1, …), n is the shift, and decryption is D(x) = (x – n) mod 26.

凯撒密码是一种历史加密技术，也是对称加密的经典例子。它通过将明文中的每个字母按字母表顺序移动固定位数来工作。例如，使用移位 3，’A’ 变成 ‘D’，’B’ 变成 ‘E’，依此类推。密钥就是移位值。从数学上讲，加密可表示为 E(x) = (x + n) mod 26，其中 x 是字母的位置（A=0, B=1, …），n 是移位，解密则表示为 D(x) = (x – n) mod 26。

However, the Caesar cipher is extremely weak by modern standards. There are only 25 possible non‑trivial keys (shifts 1-25), so an attacker can quickly try all possibilities in a brute‑force attack. Furthermore, it is vulnerable to frequency analysis because it preserves letter frequency patterns. In the WJEC exam you may be asked to encrypt or decrypt a short message using a given shift, so practice is important.

然而，按照现代标准，凯撒密码极其脆弱。只有 25 种可能的非平凡密钥（移位 1-25），因此攻击者可以迅速在暴力破解中尝试所有可能性。此外，它容易受到频率分析攻击，因为它保留了字母的频率模式。在 WJEC 考试中，你可能会被要求使用给定的移位值加密或解密一条短消息，因此练习很重要。

4. Symmetric vs Asymmetric Encryption | 对称加密与非对称加密

Symmetric encryption uses the same single key for both encryption and decryption. This means the sender and receiver must share the secret key securely beforehand, which is a key distribution problem. In contrast, asymmetric encryption uses a pair of mathematically related keys: a public key for encryption and a private key for decryption. The public key can be shared openly, while the private key must be kept secret.

对称加密使用相同的单一密钥进行加密和解密。这意味着发送方和接收方必须提前安全地共享该秘密密钥，这是一个密钥分发问题。相反，非对称加密使用一对数学上相关的密钥：公钥用于加密，私钥用于解密。公钥可以公开分享，而私钥必须保密。

Symmetric encryption is generally fast and efficient, making it suitable for encrypting large volumes of data, such as in Wi‑Fi security (WPA2) or file encryption. Asymmetric encryption is slower and more computationally intensive, but it elegantly solves the key distribution problem because the public key does not need to be kept secret. In practice, modern systems often combine both approaches.

对称加密通常速度快且高效，适合加密大量数据，例如 Wi‑Fi 安全 (WPA2) 或文件加密。非对称加密速度较慢且计算量大，但它优雅地解决了密钥分发问题，因为公钥无需保密。在实践中，现代系统通常结合使用这两种方法。

5. Modern Symmetric Encryption | 现代对称加密

Modern symmetric ciphers like AES (Advanced Encryption Standard) operate on fixed‑size blocks of data using complex substitution and permutation operations. They use strong keys of length 128, 192, or 256 bits, which makes brute‑force attacks computationally infeasible even with today’s supercomputers. AES is widely adopted for securing Wi‑Fi networks, encrypting hard drives, and protecting sensitive government communications.

像 AES（高级加密标准）这样的现代对称密码通过对固定大小的数据块进行复杂的代换和置换操作来工作。它们使用 128 位、192 位或 256 位长度的强密钥，使得即使使用当今的超级计算机，暴力破解在计算上也不可行。AES 被广泛应用于保护 Wi‑Fi 网络、加密硬盘以及保护敏感的政府通信。

6. Asymmetric Encryption: Public and Private Keys | 非对称加密：公钥与私钥

In asymmetric encryption, a message encrypted with a public key can only be decrypted by the corresponding private key. For instance, if Bob wants to send a secure message to Alice, he encrypts it using Alice’s public key. Only Alice, who holds the matching private key, can decrypt and read it. This eliminates the need to share a secret key over insecure channels, solving a major problem of symmetric cryptography.

在非对称加密中，用公钥加密的消息只能由对应的私钥解密。例如，如果 Bob 想给 Alice 发送一条安全消息，他使用 Alice 的公钥加密。只有持有匹配私钥的 Alice 才能解密并阅读它。这消除了在不安全通道上共享秘密密钥的需要，解决了对称加密的一个主要问题。

A prominent real‑world use is encrypted email. PGP (Pretty Good Privacy) typically uses asymmetric encryption to safely exchange a one‑time symmetric key. The actual message is then encrypted with that fast symmetric key, giving the best of both worlds.

一个突出的实际应用是加密电子邮件。PGP（相当好的隐私）通常使用非对称加密安全地交换一次性对称密钥，然后使用该快速的对称密钥加密实际邮件内容，从而两全其美。

7. Digital Signatures and Authentication | 数字签名与身份验证

Digital signatures provide authentication and data integrity using asymmetric key pairs. The sender uses their own private key to sign a message (or a hash of the message). The recipient then uses the sender’s public key to verify the signature. A valid verification proves that the message truly came from the claimed sender and has not been altered in transit.

数字签名使用非对称密钥对提供身份验证和数据完整性。发送方使用自己的私钥对消息（或消息的哈希值）进行签名。然后接收方使用发送方的公钥验证签名。有效的验证证明该消息确实来自声称的发送者，且在传输过程中未被篡改。

Note that signing is conceptually the reverse of encryption: the private key is used to create the signature, not to encrypt the message itself. For efficiency, a hash of the message is typically signed rather than the whole message.

请注意，签名在概念上与加密的方向相反：私钥用于创建签名，而不是用于加密消息本身。为了提高效率，通常对消息的哈希值进行签名，而不是对整个消息签名。

8. Encryption in Practice: SSL/TLS | 加密实践：SSL/TLS

SSL (Secure Sockets Layer) and its modern version TLS (Transport Layer Security) are protocols that secure communication over the internet. When you visit a website using ‘https’, the browser and server perform a TLS handshake. They use asymmetric encryption to authenticate the server and securely agree on a symmetric session key. The subsequent data transfer is then encrypted using the faster symmetric key, combining security with performance.

SSL（安全套接层）及其现代版本 TLS（传输层安全）是保障互联网通信安全的协议。当您访问使用 ‘https’ 的网站时，浏览器和服务器会执行 TLS 握手。它们使用非对称加密验证服务器身份，并安全地协商出一个对称会话密钥。随后的数据传输则使用更快的对称密钥进行加密，从而兼顾安全与性能。

The padlock icon in the browser’s address bar indicates an active TLS connection. For the WJEC GCSE exam, you should be able to describe this hybrid model and explain why both types of encryption are used.

浏览器地址栏中的挂锁图标表示已建立活动的 TLS 连接。对于 WJEC GCSE 考试，你应该能够描述这种混合模型，并解释为什么同时使用了两种加密类型。

9. Hashing and Password Storage | 哈希与密码存储

Although hashing is not encryption, it is closely related and often tested. A hash function takes input data and produces a fixed‑size, unique‑looking string (digest). Crucially, hashing is a one‑way process: you cannot reverse the digest to recover the original input. Websites never store passwords as plaintext; instead, they store a salted hash of the password. When a user logs in, the entered password is hashed with the same salt and compared to the stored hash.

虽然哈希不是加密，但两者密切相关且经常被测试。哈希函数接收输入数据并产生一个固定大小、看起来唯一的字符串（摘要）。关键的是，哈希是一个单向过程：你无法从摘要恢复原始输入。网站绝不将密码以明文形式存储；而是存储密码的加盐哈希值。当用户登录时，输入的密码用相同的盐进行哈希，并与存储的哈希值比较。

Common hash algorithms include SHA‑256. Salting adds a random string to the password before hashing, which defends against rainbow table attacks where precomputed hash‑password maps are used. For the exam, distinguish clearly between encryption (reversible) and hashing (irreversible).

常见的哈希算法包括 SHA‑256。加盐是在哈希之前向密码添加随机字符串，这可以防御使用预先计算的哈希‑密码映射的彩虹表攻击。在考试中，要清楚区分加密（可逆）和哈希（不可逆）。

10. Common Exam Questions and Tips | 常见考题与技巧

WJEC GCSE Computer Science exam questions on encryption often ask you to define key terms, compare symmetric and asymmetric encryption, or explain how public key encryption provides secure communication. You may be given a short Caesar cipher task and must show the encrypted or decrypted text step by step. Questions also focus on real‑world applications, such as how SSL/TLS secures web browsing and why digital signatures are used in email.

WJEC GCSE 计算机科学考试中关于加密的问题常常要求你定义关键术语、比较对称和非对称加密，或解释公钥加密如何提供安全通信。你可能会被给出一项简短的凯撒密码任务，并必须逐步展示加密或解密后的文本。问题还关注实际应用，例如 SSL/TLS 如何保护网页浏览，以及为什么在电子邮件中使用数字签名。

Be ready to discuss advantages and disadvantages: symmetric encryption is fast and efficient but suffers from the key distribution problem; asymmetric encryption solves distribution but is slower, making hybrid systems ideal. Always use precise vocabulary such as ‘plaintext’, ‘ciphertext’, ‘public key’ and ‘private key’. When explaining Caesar cipher, clearly state the shift and use the modulo 26 formula.

准备好讨论优缺点：对称加密快速高效，但存在密钥分发问题；非对称加密解决了分发问题，但速度较慢，因此混合系统是理想选择。始终使用精确的术语，如 “明文”、”密文”、”公钥” 和 “私钥”。在解释凯撒密码时，清楚地说明移位并使用模 26 公式。

11. Quick Recap | 快速总结

Encryption transforms plaintext into ciphertext using a key, ensuring data confidentiality. Symmetric encryption uses one shared secret key; Caesar cipher is a simple example but insecure. Asymmetric encryption uses a public/private key pair, solving key distribution and enabling digital signatures. SSL/TLS combines both types to secure the web, while hashing protects password storage. Understanding these core concepts and their differences is essential for WJEC GCSE Computing success.

加密使用密钥将明文转换为密文，确保数据机密性。对称加密使用一个共享秘密密钥；凯撒密码是一个简单但不安全的例子。非对称加密使用公钥/私钥对，解决了密钥分发问题并支持数字签名。SSL/TLS 结合这两种类型来保护网络，而哈希则保护密码存储。理解这些核心概念及其差异对于 WJEC GCSE 计算机科学的成功至关重要。

Published by TutorHao | Computer Science Revision Series | aleveler.com

更多咨询请联系16621398022（同微信）