📚 GCSE AQA Computer Science: Encryption | GCSE AQA 计算机：加密 考点精讲
Encryption is the process of converting plaintext into ciphertext to protect data from unauthorised access. For the AQA GCSE Computer Science specification, you need to understand both symmetric and asymmetric encryption, classic ciphers like Caesar and Vernam, and modern applications such as secure web browsing. This guide breaks down every key concept, provides worked examples, and highlights common exam pitfalls.
加密是将明文转换为密文以保护数据免遭未授权访问的过程。在 AQA GCSE 计算机科学大纲中，你需要理解对称加密与非对称加密、凯撒密码和韦尔纳姆密码等经典密码，以及安全网页浏览等现代应用。本文逐一拆解核心概念，给出计算示例，并指出常见考试陷阱。
1. Why Encryption Matters | 为什么加密很重要
When data is transmitted across networks or stored on devices, it is vulnerable to interception. Encryption scrambles the data so that only authorised parties with the correct key can read it. This ensures confidentiality, integrity, and often authentication. In the GCSE exam, you may be asked to explain the purpose of encryption in contexts such as online banking, email, or Wi-Fi security.
当数据在网络上传输或存储在设备上时，容易遭到拦截。加密将数据打乱，只有拥有正确密钥的授权方才能读取。这确保了机密性、完整性，通常还涉及身份验证。在 GCSE 考试中，你可能需要解释加密在网银、电子邮件或 Wi-Fi 安全等情境下的作用。
2. Plaintext, Ciphertext and Keys | 明文、密文与密钥
Plaintext is the original readable message. Ciphertext is the scrambled output after encryption. A key is a piece of information used by an algorithm to encrypt or decrypt data. The security of most systems depends on keeping the key secret, not the algorithm — this is Kerckhoffs’s principle. If a key is lost or stolen, the encrypted data can be compromised.
明文是原始可读的消息。密文是加密后生成的乱码输出。密钥是算法用来加密或解密数据的一段信息。大多数系统的安全性依赖于密钥的保密，而非算法的保密——这就是柯克霍夫原则。如果密钥丢失或被盗，加密数据就可能被破解。
3. The Caesar Cipher | 凯撒密码
The Caesar cipher is a substitution cipher that shifts each letter in the plaintext by a fixed number of places in the alphabet. For example, with a shift of +3, A becomes D, B becomes E, and so on. It is symmetric because the same shift value is used for both encryption and decryption. In the exam, you might be asked to encrypt or decrypt a short message, and to explain why this cipher is extremely weak by modern standards.
凯撒密码是一种替换密码，它将明文中的每个字母按字母表顺序移动固定位数。例如，位移 +3 时，A 变成 D，B 变成 E，依此类推。它是对称的，因为加密和解密使用相同的位移值。考试中可能要求你对短消息加密或解密，并解释为什么这种密码在现代标准下极其脆弱。
To break a Caesar cipher, an attacker can simply try all 25 possible shifts — this is a brute force attack. Because the keyspace is so small, the cipher provides virtually no security. The exam may ask you to evaluate its weakness and suggest when it might still be used, such as as a simple puzzle.
破解凯撒密码只需尝试所有 25 种可能的位移——这就是暴力破解。由于密钥空间太小，这种密码几乎不提供任何安全性。考题可能请你评价其弱点，并指出它可能何时仍被使用，例如作为简单的智力游戏。
4. Vernam Cipher (One‑Time Pad) | 韦尔纳姆密码（一次一密）
The Vernam cipher, also called the one‑time pad, is the only theoretically unbreakable encryption method when used correctly. It combines the plaintext with a truly random key of the same length using the XOR (exclusive OR) operation. In GCSE, you need to understand how XOR works at the bit level and why reusing a key or using a short repeating key destroys its security.
韦尔纳姆密码，又称一次一密，是理论上唯一不可破解的加密方法（正确使用时）。它使用 XOR（异或）运算将明文与等长的真随机密钥结合。在 GCSE 中，你需要理解 XOR 在位级如何工作，以及为什么重用密钥或使用短重复密钥会破坏其安全性。
Example: plaintext bit 1, key bit 0 → XOR result 1. To decrypt, XOR the ciphertext with the same key: 1 XOR 0 = 1, recovering the original plaintext bit. The exam may present a short binary sequence and ask you to calculate the ciphertext or plaintext given a key.
示例：明文位 1，密钥位 0 → XOR 结果 1。解密时，将密文与同一密钥进行 XOR：1 XOR 0 = 1，恢复原始明文位。考试可能给出短二进制序列，要求根据密钥计算密文或明文。
The key must be truly random, used only once, and kept secret. If these conditions are met, the cipher is immune to cryptanalysis. However, practical difficulties in generating and distributing long random keys make it impractical for most applications.
密钥必须真随机、只用一次且保密。若满足这些条件，该密码对密码分析免疫。但生成和分发长随机密钥的实际困难使其在大多数应用中不切实际。
5. Symmetric Encryption | 对称加密
In symmetric encryption, the same key is used for both encryption and decryption. This method is fast and efficient for bulk data. The main problem is key distribution: how do you securely share the key with the intended recipient? Common symmetric algorithms (beyond GCSE scope) include AES and DES. The exam might ask you to compare symmetric with asymmetric encryption.
对称加密使用同一密钥进行加密和解密。此方法对大量数据快速高效。主要问题是密钥分发：如何将密钥安全地分享给指定接收者？常见的对称算法（超出 GCSE 范围）有 AES 和 DES。考题可能要求你比较对称加密与非对称加密。
Think of symmetric encryption like a locked box: both sender and receiver need a copy of the same key. If an attacker intercepts the key during transmission, they can decrypt all messages. Therefore, secure key exchange is essential.
想像对称加密像一个锁住的盒子：发送方和接收方都需要同一把钥匙的副本。如果攻击者在传输中截获钥匙，就能解密所有消息。因此，安全的密钥交换至关重要。
6. Asymmetric Encryption (Public Key Cryptography) | 非对称加密（公钥密码学）
Asymmetric encryption uses a pair of mathematically related keys: a public key and a private key. The public key can be shared with anyone, while the private key is kept secret. Data encrypted with the public key can only be decrypted with the corresponding private key, and vice versa. This solves the key distribution problem of symmetric encryption.
非对称加密使用一对数学上相关的密钥：公钥和私钥。公钥可分享给任何人，私钥保密。用公钥加密的数据只能用对应私钥解密，反之亦然。这解决了对称加密的密钥分发难题。
For example, if Bob wants to send a confidential message to Alice, he encrypts it using Alice’s public key. Only Alice, with her private key, can decrypt it. Even if an attacker intercepts the encrypted message and knows Alice’s public key, they cannot decrypt without the private key.
例如，如果 Bob 想向 Alice 发送机密消息，他用 Alice 的公钥加密。只有 Alice 用私钥才能解密。即使攻击者截获加密消息并知道 Alice 的公钥，没有私钥也无法解密。
Asymmetric encryption is slower than symmetric encryption and is often used to securely exchange a symmetric session key for further communication — a concept called a hybrid system. The exam expects you to explain the role of public and private keys and identify situations where asymmetric encryption is used, such as HTTPS, digital signatures, and email encryption.
非对称加密比对称加密慢，常用来安全交换对称会话密钥以进行后续通信——这种概念称为混合系统。考试要求你解释公钥和私钥的作用，并识别使用非对称加密的场景，如 HTTPS、数字签名和电子邮件加密。
7. Encryption in Practice: HTTPS and SSL/TLS | 实际应用中的加密：HTTPS 与 SSL/TLS
When you visit a secure website (URL starting with https://), your browser establishes an encrypted connection using a protocol called TLS (formerly SSL). This process begins with asymmetric encryption: the browser obtains the server’s public key from its digital certificate, verifies the server’s identity, and then uses it to securely agree on a symmetric session key. All further data transfer uses fast symmetric encryption.
当你访问安全网站（以 https:// 开头的网址），浏览器使用称为 TLS（前身 SSL）的协议建立加密连接。该过程以非对称加密开始：浏览器从服务器的数字证书获取其公钥，验证服务器身份，然后用它安全地协商对称会话密钥。所有后续数据传输都使用快速的对称加密。
This combination provides both confidentiality and authentication. The padlock icon in the browser indicates an active encrypted session. The GCSE exam may ask you to describe why HTTPS is important for online shopping and banking, mentioning concepts like man‑in‑the‑middle attacks.
这种组合提供了机密性和身份验证。浏览器中的挂锁图标表示存在活跃的加密会话。GCSE 考试可能请描述 HTTPS 对网购和网银为何重要，并提及中间人攻击等概念。
8. Hashing vs Encryption | 哈希与加密的区别
Hashing is often confused with encryption, but they serve different purposes. A hash function takes an input (or message) and returns a fixed‑size string of bytes. The output, called the hash value or digest, is unique to the given input (ideally) and is a one‑way function: you cannot reverse it to get the original input. Hashing is used for verifying data integrity and storing passwords securely, not for confidentiality.
哈希常与加密混淆，但用途不同。哈希函数接收输入（或消息）并返回固定大小的字节串。输出称为哈希值或摘要，通常唯一且为单向函数：无法逆向得到原始输入。哈希用于验证数据完整性和安全存储密码，而非用于保密。
Encryption, in contrast, is two‑way: with the correct key, you can decrypt ciphertext back into plaintext. In the exam, you may need to distinguish between when to use encryption (to keep data secret) and when to use hashing (to check if data has been altered or to store passwords without storing the actual password).
加密相反，是双向的：用正确密钥可将密文解密成明文。考试中，你需要区分何时使用加密（保持数据机密）和何时使用哈希（检查数据是否被篡改，或在不存储实际密码的情况下存储密码）。
9. Brute Force Attacks and Other Threats | 暴力破解及其他威胁
A brute force attack tries every possible key until the correct one is found. The time required depends on the keyspace — the total number of possible keys. Modern encryption algorithms use key lengths large enough (e.g., 128‑bit, 256‑bit) to make brute force attacks computationally infeasible. Caesar cipher’s keyspace of 25 makes it trivially vulnerable.
暴力破解尝试每一个可能的密钥直到找到正确的那一个。所需时间取决于密钥空间——可能的密钥总数。现代加密算法使用足够长的密钥（如 128 位、256 位），使得暴力破解在计算上不可行。凯撒密码 25 的密钥空间使其极易被攻破。
Other threats include social engineering attacks where a person is tricked into revealing a key, keyloggers that record keystrokes, and man‑in‑the‑middle attacks where an attacker intercepts communication. Encryption alone cannot protect against all these — it must be combined with other security measures like two‑factor authentication and user education.
其他威胁包括社工攻击（诱骗他人泄露密钥）、记录击键的键盘记录器，以及拦截通信的中间人攻击。单靠加密无法防范所有威胁——必须结合其他安全措施，如双因素身份验证和用户教育。
10. Exam Tips and Common Mistakes | 考试技巧与常见错误
Many students lose marks by confusing encryption with encoding (e.g., Base64) or compression — encryption requires a key and is for secrecy. Always state whether a cipher is symmetric or asymmetric, and explain key distribution if relevant. For Caesar shifts, be careful with wrap‑around after Z: a shift of 2 from Y gives A, not [ . Use a mapping table if needed.
许多学生因混淆加密与编码（如 Base64）或压缩而丢分——加密需要密钥且为了保密。务必说明密码是对称还是非对称的，并视情况解释密钥分发。对于凯撒位移，注意过 Z 后的回绕：从 Y 位移 2 得到 A，而不是 [。必要时可用对照表。
When describing the Vernam cipher, always mention that the key must be truly random and used only once. Do not claim it is unbreakable without stating those conditions. For public‑key systems, remember that the public key encrypts, the private key decrypts; do not swap them around. Practice binary XOR problems to ensure accuracy.
描述韦尔纳姆密码时，务必提及密钥必须真随机且只使用一次。不要在没有说明这些条件的情况下声称它不可破解。对于公钥系统，记住公钥加密、私钥解密；不要搞混。练习二进制 XOR 问题以确保准确。
Published by TutorHao | Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
屏轩国际教育cambridge primary/secondary checkpoint, cat4, ukiset,ukcat,igcse,alevel,PAT,STEP,MAT, ibdp,ap,ssat,sat,sat2课程辅导，国外大学本科硕士研究生博士课程论文辅导