📚 IGCSE Computer Science: Encryption Key Points | IGCSE 计算机：加密 考点精讲
Encryption is one of the most important concepts in modern computing, safeguarding everything from online payments to private messages. In IGCSE Computer Science, you are expected to understand how encryption works, the difference between symmetric and asymmetric methods, the role of keys, and how technologies like SSL/TLS and digital signatures keep our digital lives secure. This article breaks down all the essential encryption topics you need to master for the exam, with paired English–Chinese explanations and clear examples.
加密是现代计算中最重要的概念之一，保护着从在线支付到私人消息的一切内容。在 IGCSE 计算机科学课程中，你需要理解加密的工作原理、对称与非对称方法的区别、密钥的作用，以及 SSL/TLS 和数字签名等技术如何保障我们的数字生活。本文拆解了所有你必须掌握的加密考点，配有中英双语讲解和清晰的例子。
1. What Is Encryption? | 什么是加密？
Encryption is the process of transforming readable data, known as plaintext, into an unreadable format called ciphertext. This transformation uses an algorithm and a key. Only someone with the correct key can decrypt the ciphertext back into plaintext. Encryption ensures confidentiality, meaning that even if data is intercepted, it cannot be understood without authorisation.
加密是将可读数据（称为明文）转换为不可读格式（称为密文）的过程。这种转换使用算法和密钥。只有拥有正确密钥的人才能将密文解密回明文。加密确保了机密性，意味着即使数据被截获，未经授权也无法理解。
2. Why Do We Need Encryption? | 为什么需要加密？
In a world where data is constantly transmitted over networks, encryption protects sensitive information from eavesdroppers and cyber attackers. It is essential for online banking, email communication, password storage, and e‑commerce transactions. Without encryption, personal details, credit card numbers, and login credentials would be exposed to anyone monitoring the network traffic.
在一个数据不断通过网络传输的世界里，加密可以保护敏感信息免受窃听者和网络攻击者的侵害。它对于在线银行、电子邮件通信、密码存储和电子商务交易至关重要。没有加密，个人详细信息、信用卡号和登录凭据将暴露给任何监控网络流量的人。
3. Symmetric Encryption Explained | 对称加密详解
Symmetric encryption uses the same key for both encryption and decryption. The sender and receiver must both have access to this secret key, and it must be shared securely before communication begins. Common symmetric algorithms include AES (Advanced Encryption Standard) and DES (Data Encryption Standard). Symmetric encryption is fast and efficient, making it suitable for encrypting large amounts of data, but the key distribution problem is a major drawback—if the key is intercepted during sharing, the whole system is compromised.
对称加密在加密和解密时使用相同的密钥。发送方和接收方都必须可以访问这个秘密密钥，并且必须在通信开始之前安全地共享它。常见的对称算法包括 AES（高级加密标准）和 DES（数据加密标准）。对称加密速度快、效率高，适合加密大量数据，但密钥分发问题是一个主要缺点——如果在共享过程中密钥被截获，整个系统就会遭到破坏。
4. Asymmetric Encryption Explained | 非对称加密详解
Asymmetric encryption, also called public key encryption, uses a pair of mathematically related keys: a public key and a private key. The public key can be freely distributed and is used to encrypt messages, while the private key is kept secret and is used for decryption. Even if someone knows the public key, they cannot deduce the private key. RSA is the most widely used asymmetric algorithm. This method solves the key distribution problem, but it is computationally slower than symmetric encryption, so it is often used to securely exchange symmetric keys rather than to encrypt bulk data.
非对称加密，也称为公钥加密，使用一对数学上相关的密钥：公钥和私钥。公钥可以自由分发，用于加密消息；私钥则保密，用于解密。即使有人知道公钥，也无法推导出私钥。RSA 是最广泛使用的非对称算法。这种方法解决了密钥分发问题，但计算速度比对称加密慢，因此它通常用于安全地交换对称密钥，而不是加密大量数据。
5. Public and Private Keys | 公钥与私钥
The public key is shared openly and anyone can use it to encrypt a message intended for the owner of the corresponding private key. Only that owner, who possesses the private key, can decrypt the message. The private key must never be revealed. This one-way relationship also enables digital signatures: the owner can encrypt (sign) a message with their private key, and anyone with the public key can decrypt (verify) it, confirming the sender’s identity.
公钥是公开共享的，任何人都可以用它来加密发送给对应私钥所有者的消息。只有拥有该私钥的所有者才能解密消息。私钥绝不能泄露。这种单向关系还支持数字签名：所有者可以用自己的私钥加密（签名）一条消息，任何持有公钥的人都可以解密（验证）该消息，从而确认发送者的身份。
6. Comparing Symmetric and Asymmetric Encryption | 对称与非对称加密比较
| Feature | 特性 | Symmetric | 对称 | Asymmetric | 非对称 |
|---|---|---|
| Keys used | 密钥数量 | One shared secret key | Two keys: public and private |
| Speed | 速度 | Faster | Slower |
| Key distribution | 密钥分发 | Problematic; must be shared securely | Public key freely distributed, private key never shared |
| Use case | 用例 | Bulk data encryption | Key exchange, digital signatures |
Symmetric encryption is typically used for encrypting large volumes of data once a secure session is established, while asymmetric encryption is used during the initial handshake to securely exchange the symmetric key. This hybrid approach is the foundation of SSL/TLS.
对称加密通常用于在建立安全会话后加密大量数据，而非对称加密则在初始握手阶段用于安全地交换对称密钥。这种混合方法是 SSL/TLS 的基础。
7. Hash Functions | 哈希函数
A hash function takes an input (or message) and returns a fixed-size string of bytes, typically a digest that appears random. The key properties of a cryptographic hash function are: it is deterministic (same input always gives the same hash), it is quick to compute, it is infeasible to reverse (one-way), a small change in the input completely changes the hash (avalanche effect), and it is collision-resistant (two different inputs should not produce the same hash). Common hash algorithms include SHA‑256 and MD5 (though MD5 is now considered broken). Hashing is used to verify data integrity and to store passwords securely.
哈希函数接收输入（或消息）并返回固定大小的字节串，通常是一个看似随机的摘要。加密哈希函数的关键特性有：确定性（相同输入始终产生相同哈希值）、计算快速、不可逆（单向性）、输入的微小变化会彻底改变哈希值（雪崩效应），以及抗碰撞性（两个不同输入不应产生相同哈希值）。常见的哈希算法包括 SHA‑256 和 MD5（尽管 MD5 现在被认为不安全）。哈希用于验证数据完整性和安全存储密码。
8. Digital Signatures | 数字签名
A digital signature is a cryptographic technique that validates the authenticity and integrity of a digital message or document. It works by creating a hash of the message and then encrypting that hash with the sender’s private key. The recipient decrypts the signature with the sender’s public key to obtain the hash, and then independently hashes the message. If the two hashes match, the signature is valid, proving that the message came from the claimed sender and has not been altered.
数字签名是一种验证数字消息或文件真实性和完整性的加密技术。它通过创建消息的哈希值，然后用发送者的私钥对该哈希值进行加密。接收者用发送者的公钥解密签名以获得哈希值，然后独立计算消息的哈希。如果两个哈希值匹配，则签名有效，证明消息来自声称的发送者且未被篡改。
9. SSL/TLS and HTTPS | SSL/TLS 与 HTTPS
SSL (Secure Sockets Layer) and its successor TLS (Transport Layer Security) are protocols that provide secure communication over a computer network. When you visit a website using HTTPS (HTTP over SSL/TLS), your browser and the server perform a handshake where they agree on encryption algorithms, exchange a symmetric session key using asymmetric encryption, and then use symmetric encryption for the rest of the session. This ensures confidentiality, integrity, and authentication. The padlock icon in the browser address bar indicates a valid TLS certificate.
SSL（安全套接层）及其后继者 TLS（传输层安全）是提供计算机网络安全通信的协议。当你使用 HTTPS（基于 SSL/TLS 的 HTTP）访问网站时，浏览器与服务器会进行握手，协商加密算法，使用非对称加密交换对称会话密钥，然后在会话剩余部分使用对称加密。这确保了机密性、完整性和认证。浏览器地址栏中的挂锁图标表示有效的 TLS 证书。
10. Simple Encryption Example: Caesar Cipher | 简单加密示例：凯撒密码
The Caesar cipher is a classic substitution cipher where each letter in the plaintext is shifted a certain number of places down the alphabet. For example, with a shift of 3, A becomes D, B becomes E, and so on. The key is the shift value. To decrypt, the receiver shifts the letters back by the same amount. Although incredibly weak by modern standards and easily cracked by brute force or frequency analysis, the Caesar cipher illustrates the basic concepts of encryption key and algorithm.
凯撒密码是一种经典的替换密码，明文中的每个字母沿字母表移动一定数量的位置。例如，移位量为 3 时，A 变成 D，B 变成 E，依此类推。密钥就是移位值。解密时，接收者将字母向后移动相同的数量。尽管以现代标准来看它极其脆弱，容易被暴力破解或频率分析攻破，但凯撒密码说明了加密密钥和算法的基本概念。
11. Real‑World Applications of Encryption | 加密的实际应用
Encryption is embedded in everyday technology. We rely on it for secure web browsing (HTTPS), wireless networks (WPA2/WPA3), mobile messaging apps (end‑to‑end encryption in WhatsApp and Signal), online banking, and virtual private networks (VPNs). Full‑disk encryption like BitLocker or FileVault protects data on lost or stolen devices. Even email can be encrypted using protocols like PGP (Pretty Good Privacy), which combines symmetric and asymmetric encryption.
加密已融入日常技术。我们依赖它进行安全网页浏览（HTTPS）、无线网络（WPA2/WPA3）、移动消息应用（如 WhatsApp 和 Signal 的端到端加密）、在线银行以及虚拟专用网络（VPN）。BitLocker 或 FileVault 等全磁盘加密可以保护丢失或被盗设备上的数据。甚至电子邮件也可以使用 PGP（良好隐私）等协议进行加密，该协议结合了对称和非对称加密。
12. Summary of Key Points for IGCSE | IGCSE 考点总结
- Encryption converts plaintext to ciphertext; decryption reverses it. | 加密将明文转换为密文；解密逆转该过程。
- Symmetric encryption uses one shared key; it is fast but requires secure key distribution. | 对称加密使用一个共享密钥；速度快但需要安全分发密钥。
- Asymmetric encryption uses a public/private key pair; it solves the key exchange problem but is slower. | 非对称加密使用公钥/私钥对；解决了密钥交换问题但速度较慢。
- Hash functions produce a fixed‑length digest; they are one‑way and used for integrity and password storage. | 哈希函数产生固定长度的摘要；是单向的，用于完整性和密码存储。
- Digital signatures provide authentication and non‑repudiation by encrypting a hash with a private key. | 数字签名通过用私钥加密哈希值提供认证和不可否认性。
- SSL/TLS combines asymmetric and symmetric encryption to secure web traffic (HTTPS). | SSL/TLS 结合非对称和对称加密来保护网络流量（HTTPS）。
- The Caesar cipher is a simple substitution cipher illustrating basic encryption ideas. | 凯撒密码是一种简单的替换密码，说明基本的加密思想。
- Real‑world use includes HTTPS, messaging apps, Wi‑Fi security, and file encryption. | 实际应用包括 HTTPS、消息应用、Wi‑Fi 安全和文件加密。
Understanding these core principles will equip you to answer any IGCSE encryption question confidently, whether it asks you to describe symmetric encryption, compare cryptographic methods, or explain how digital signatures work.
理解这些核心原理能让你自信地回答任何 IGCSE 加密问题，无论是要求描述对称加密、比较加密方法，还是解释数字签名的工作原理。
Published by TutorHao | IGCSE Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
屏轩国际教育cambridge primary/secondary checkpoint, cat4, ukiset,ukcat,igcse,alevel,PAT,STEP,MAT, ibdp,ap,ssat,sat,sat2课程辅导，国外大学本科硕士研究生博士课程论文辅导