aleveler.com

Tag: ccea

  • GCSE CCEA Physics: Dynamics Revision Guide | GCSE CCEA 物理：动力学 考点精讲

    📚 GCSE CCEA Physics: Dynamics Revision Guide | GCSE CCEA 物理：动力学 考点精讲

    Welcome to the GCSE CCEA Physics Dynamics revision guide. Dynamics is the study of forces and motion, combining kinematics (the description of motion) with the causes of motion. This guide covers scalars and vectors, speed, velocity, acceleration, motion graphs, equations of uniformly accelerated motion, Newton’s laws, momentum, impulse, friction and terminal velocity. A solid grasp of these concepts is essential for problem-solving and for understanding many real-world applications, from vehicle safety to sport.

    欢迎阅读 GCSE CCEA 物理动力学考点精讲。动力学研究力与运动，将运动学（描述运动）与引起运动的原因结合在一起。本指南涵盖标量与向量、速率、速度、加速度、运动图像、匀加速运动方程、牛顿定律、动量、冲量、摩擦与终端速度。扎实掌握这些概念对于解题以及理解从汽车安全到体育等许多实际应用至关重要。

    1. Scalars and Vectors | 标量与向量

    Physical quantities are classified as either scalars or vectors. A scalar quantity is fully described by its magnitude (size) and appropriate units. Speed, distance, mass, time and energy are common scalars. A vector quantity, however, requires both magnitude and direction to be fully described. Velocity, displacement, acceleration, force and momentum are vectors. When adding vectors, you must consider their directions: if they act along the same line, simply add or subtract, but if they are at an angle, use scale drawing or trigonometry. Vectors are often drawn as arrows, where the length represents the magnitude and the arrowhead indicates direction.

    物理量可分为标量和向量。标量只需大小（量值）和适当单位就能完整描述，常见的标量有速率、路程、质量、时间和能量。向量则需要同时指明大小和方向，例如速度、位移、加速度、力和动量。向量相加时必须考虑方向：若在同一直线上，可直接加减；若互成角度，则需要使用比例绘图或三角法。向量通常用箭头表示，长度代表大小，箭头指向表示方向。

    2. Speed, Velocity and Displacement | 速率、速度与位移

    Speed is a scalar quantity defined as the rate at which distance is covered: speed = distance travelled ÷ time taken. Velocity is the vector equivalent – it is the rate of change of displacement. Displacement is the straight-line distance between the start and finish points in a specific direction, whereas distance is the total path length. Average velocity = total displacement ÷ total time. The instantaneous velocity is the velocity at a specific moment, which can be found from the gradient of a displacement–time graph. In everyday language we often use ‘speed’ and ‘velocity’ interchangeably, but for precise physics you must distinguish between them.

    速率是标量，定义为单位时间所通过的路程：速率 = 通过的路程 ÷ 所用时间。速度是相应的向量 —— 它是位移的变化率。位移是起点到终点的直线距离，并带有特定方向，而路程则是经过路径的总长度。平均速度 = 总位移 ÷ 总时间。瞬时速度是某一时刻的速度，可以由位移-时间图像的斜率求得。在日常语言中我们常混用“速率”和“速度”，但在严谨的物理学中必须加以区分。

    3. Acceleration | 加速度

    Acceleration is defined as the rate of change of velocity. It is a vector quantity and is calculated by: a = Δv ÷ Δt, where Δv is the change in velocity and Δt is the time taken for that change. The SI unit of acceleration is metres per second squared (m/s²). If an object speeds up, its acceleration is in the same direction as its velocity. If it slows down, the acceleration is opposite to the velocity, often called deceleration or retardation. An object moving with uniform acceleration changes its velocity by equal amounts in equal time intervals. You can also determine acceleration from the gradient of a velocity–time graph.

    加速度定义为速度的变化率。它是向量，计算公式为：a = Δv ÷ Δt，其中 Δv 是速度的变化量，Δt 是发生该变化所用的时间。加速度的国际单位是米每二次方秒 (m/s²)。若物体加速，加速度方向与速度方向相同；若减速，加速度方向与速度方向相反，通常称为减速度。匀加速运动的物体在相等的时间间隔内速度变化量相等。加速度也可以从速度-时间图像的斜率求得。

    4. Motion Graphs | 运动图像

    Distance–time graphs show how distance changes over time. The gradient of a distance–time graph gives the speed: a steeper gradient indicates a higher speed, a horizontal line means the object is stationary. A curved line indicates changing speed (acceleration). Velocity–time graphs are particularly powerful. The gradient of a velocity–time graph gives the acceleration, and the area under the graph represents the displacement. A horizontal line on a velocity–time graph indicates constant velocity; a sloping straight line indicates uniform acceleration; and a curve shows non-uniform acceleration. Learning to interpret and sketch these graphs is a core skill in dynamics.

    距离-时间图像显示距离随时间的变化。距离-时间图像的斜率表示速率：斜率越陡表示速率越高，水平线表示物体静止，曲线则表示速率在变化（加速）。速度-时间图像的功能更强。速度-时间图像的斜率表示加速度，图像与时间轴所围的面积表示位移。速度-时间图像上的水平线表示匀速运动；倾斜直线表示匀加速运动；曲线则表示非匀加速运动。学会解读和绘制这些图像是动力学中的一项核心技能。

    5. Equations of Uniformly Accelerated Motion (SUVAT) | 匀加速运动方程

    For motion in a straight line with constant acceleration, the SUVAT equations link the five key quantities: s (displacement), u (initial velocity), v (final velocity), a (acceleration) and t (time). The four equations are shown in the table below. Remember that these equations only apply when the acceleration is uniform. Choose the equation that includes the three known quantities and the one unknown you wish to find. Always define a positive direction and treat all vectors accordingly; for example, upward displacement may be positive, and downward negative.

    对于匀加速直线运动，SUVAT 方程将五个关键量联系在一起：s（位移）、u（初速度）、v（末速度）、a（加速度）和 t（时间）。四个方程如下表所示。请牢记这些方程只适用于加速度恒定的情况。解题时选择包含三个已知量和所求未知量的方程。务必先规定正方向，并相应地处理所有向量；例如可取向上位移为正，向下为负。

    Equation Missing quantity | 缺量 Notes | 说明

    v = u + a t

    		 s Without displacement | 无位移

    s = u t + ½ a t²

    		 v Without final velocity | 无末速度

    v² = u² + 2 a s

    		 t Without time | 无时间

    s = (u + v) / 2 × t

    		 a Without acceleration | 无加速度

    These equations can be derived from the definitions of velocity and acceleration. In the exam, always show your working clearly by stating the chosen equation, substituting values and including units. Be careful with negative acceleration — if the object is slowing down while moving in the positive direction, a will be negative.

    这些方程可以从速度和加速度的定义推导出来。考试中务必写出清晰的解题步骤：列出所选方程，代入数值并标明单位。注意处理负加速度——若物体沿正方向减速，则 a 为负数。

    6. Forces and Newton’s Laws of Motion | 力与牛顿运动定律

    A force is a push or pull that can change an object’s speed, direction or shape. Force is a vector quantity, measured in newtons (N). One newton is the force needed to accelerate a 1 kg mass by 1 m/s². Newton’s three laws of motion form the foundation of dynamics:

    力是一种推或拉，能改变物体的速率、方向或形状。力是向量，单位为牛顿 (N)。1 牛顿是将 1 kg 质量的物体加速 1 m/s² 所需的力。牛顿运动三定律构成了动力学的基础：

    First Law (Inertia): An object remains at rest or in uniform motion in a straight line unless acted upon by a resultant external force. This explains why seatbelts are needed — passengers continue moving forward when a car stops suddenly.

    第一定律（惯性定律）：物体在不受外力（合力为零）时保持静止或匀速直线运动状态。这解释了为何需要安全带——当汽车突然停下时，乘客会因惯性继续向前运动。

    Second Law: The resultant force on an object is equal to the mass of the object multiplied by its acceleration: F = m a. The acceleration is in the same direction as the resultant force. This relationship can also be used to define the newton.

    第二定律：物体所受的合力等于物体的质量乘以加速度：F = m a。加速度的方向与合力的方向相同。这一定律也用于定义牛顿。

    F = m a

    Third Law: For every action force there is an equal and opposite reaction force. The two forces act on different bodies and are of the same type. When you push against a wall, the wall pushes back on you. Rocket propulsion and walking also rely on action–reaction pairs.

    第三定律：每一个作用力都有一个大小相等、方向相反的反作用力。这两个力作用在不同的物体上，且属于同种性质的力。推墙时，墙也反推你。火箭推进和走路都依赖于作用力与反作用力对。

    7. Mass, Weight and Gravitational Field Strength | 质量、重量与重力场强度

    Mass is a scalar quantity that measures the amount of matter in an object. It is measured in kilograms (kg) and does not change with location. Weight, however, is a vector — it is the gravitational force acting on a mass. Weight = mass × gravitational field strength (W = m g). On Earth, g ≈ 9.8 N/kg (often rounded to 10 N/kg in GCSE problems). The weight of an object changes if the gravitational field strength changes, for example on the Moon, where g is about 1.6 N/kg. Always distinguish between mass and weight: mass is constant, weight varies.

    质量是标量，衡量物体所含物质的多少，以千克 (kg) 为单位，且不随位置改变。重量则是向量——它是作用在质量上的重力。重量 = 质量 × 重力场强度 (W = m g)。在地球表面，g ≈ 9.8 N/kg（GCSE 题目中常取 10 N/kg）。如果重力场强度变化，物体的重量也会变化，比如月球上的 g 约为 1.6 N/kg。务必区分质量与重量：质量是恒量，重量则随 g 而变。

    8. Momentum and Conservation of Momentum | 动量与动量守恒

    Momentum is a vector quantity defined as the product of an object’s mass and its velocity: p = m v. The unit of momentum is kg m/s. Momentum is a useful concept for describing collisions and explosions. The principle of conservation of momentum states that within a closed system (no external forces), the total momentum before an event is equal to the total momentum after the event. For two objects colliding: m₁u₁ + m₂u₂ = m₁v₁ + m₂v₂, where u represents initial velocities and v final velocities. Collisions can be elastic (kinetic energy conserved) or inelastic (some kinetic energy converted to other forms), but momentum is always conserved in both cases.

    动量是向量，定义为物体质量与速度的乘积：p = m v。动量单位是 kg m/s。动量是描述碰撞和爆炸的有效概念。动量守恒定律指出，在一个不受外力的封闭系统中，事件发生前的总动量等于事件发生后的总动量。对于两个物体的碰撞：m₁u₁ + m₂u₂ = m₁v₁ + m₂v₂，其中 u 表示初速度，v 表示末速度。碰撞可以是弹性的（动能守恒）或非弹性的（部分动能转化为其他形式），但动量在任何情况下总是守恒的。

    9. Impulse, Force and Safety Features | 冲量、力与安全装置

    When a resultant force acts on an object for a certain time, it causes a change in momentum. This is known as impulse: Impulse = F Δt = Δp = m v – m u. The same change in momentum can be achieved by a large force acting over a short time or a smaller force acting over a longer time. In vehicle safety, the aim is to increase the time over which a collision occurs, thereby reducing the force on the occupants. Crumple zones at the front and rear of cars deform progressively, extending the collision time. Airbags inflate rapidly and cushion the person, increasing the duration of impact. Seatbelts stretch slightly to do the same. Cycle helmets and cushioned sports surfaces work on the identical principle of extending impact time to lower the average force experienced.

    当合力对物体作用一段时间时，会引起动量的变化，这称为冲量：冲量 = F Δt = Δp = m v – m u。相同的动量变化可以通过大力短时间作用实现，也可以通过较小力长时间作用实现。在车辆安全中，目标是延长碰撞发生的时间，从而减小乘员所受的力。汽车前后部的褶皱区发生渐进式形变，延长了碰撞时间。气囊快速充气起到缓冲作用，增大了撞击作用时间。安全带会轻微拉伸以达到相同效果。自行车头盔和缓冲运动地面也是利用同样的原理，通过延长作用时间来降低平均受力。

    10. Friction, Air Resistance and Terminal Velocity | 摩擦力、空气阻力与终端速度

    Friction is a force that opposes motion between two surfaces in contact. It can be useful (allowing walking and braking) or a nuisance (causing wear and energy loss). Air resistance (or fluid drag) is a frictional force that increases with speed. When an object falls through a fluid (such as air), two forces act on it: weight downward and drag upward. Initially, weight causes acceleration. As speed increases, drag increases until drag equals weight. At that point, the resultant force is zero, and the object falls at a constant speed called terminal velocity. A skydiver experiences increasing drag from the parachute, which dramatically lowers the terminal velocity, ensuring a safe landing. Streamlining reduces drag and raises terminal velocity.

    摩擦力是阻碍两个接触表面相对运动的力。它既有用（使人能行走和刹车），也会造成麻烦（引起磨损和能量损耗）。空气阻力（或流体阻力）是一种随速度增大而增大的摩擦力。物体在流体（如空气）中下落时，受到两个力：向下的重力和向上的阻力。起初，重力引起加速运动。随着速度增大，阻力也增大，直到阻力与重力平衡。此时合力为零，物体以恒定速度下落，这一速度称为终端速度。跳伞运动员张开降落伞后阻力剧增，极大地降低了终端速度，从而安全着陆。流线型设计能减小阻力，提高终端速度。

    A graph of velocity against time for a falling object shows an initial steep increase (acceleration) that gradually flattens into a horizontal line as terminal velocity is reached. Understanding terminal velocity also explains why tiny droplets or particles fall very slowly — their small weight is balanced by a relatively large drag at low speeds.

    下落物体的速度-时间图像显示，速度起初快速增加，随后逐渐弯曲，在达到终端速度时变为水平线。理解终端速度也解释了为何微小液滴或颗粒下落得非常慢——由于其重量很小，在低速时就已经与相对较大的阻力达成平衡。

    Published by TutorHao | Physics Revision Series | aleveler.com

    更多咨询请联系16621398022（同微信）

  • A-Level CCEA Computer Science: Encryption Exam Focus | A-Level CCEA 计算机：加密 考点精讲

    📚 A-Level CCEA Computer Science: Encryption Exam Focus | A-Level CCEA 计算机：加密 考点精讲

    Encryption is a fundamental topic in the CCEA A-Level Computer Science specification, underpinning modern digital security. This article distils the essential concepts, algorithms, and protocols you must master for the examination, from symmetric and asymmetric ciphers to hashing and digital signatures. We will walk through classic examples such as Caesar and Vigenère before diving into AES, RSA, SSL/TLS, and practical storage concerns.

    加密是 CCEA A-Level 计算机科学考试大纲中的基础性主题，支撑着现代数字安全。本文提炼了考试必须掌握的核心概念、算法和协议，涵盖对称与非对称密码、哈希函数以及数字签名。我们将从凯撒密码和维吉尼亚密码等经典示例入手，再深入探讨 AES、RSA、SSL/TLS 以及实际的密码存储问题。

    1. What is Encryption? | 什么是加密？

    Encryption is the process of converting plaintext into ciphertext using an algorithm and a key, ensuring that unauthorised parties cannot read the original message. The reverse process, decryption, recovers the plaintext from the ciphertext using a corresponding key. Encryption provides confidentiality, but it can also be combined with other mechanisms to deliver integrity and authentication.

    加密是使用算法和密钥将明文转换为密文的过程，确保未经授权的第三方无法读取原始消息。其逆过程——解密，则利用相应的密钥从密文中恢复出明文。加密提供了机密性，但也可以与其他机制结合，实现完整性和身份验证。

    2. Symmetric Encryption | 对称加密

    Symmetric encryption uses a single shared key for both encryption and decryption. The sender and receiver must have exchanged this key securely beforehand. Symmetric algorithms are typically fast and suitable for encrypting large volumes of data. The main challenge is secure key distribution, because anyone who possesses the key can decrypt the message.

    对称加密使用单一共享密钥进行加密和解密。发送方和接收方必须提前安全地交换该密钥。对称算法通常速度快，适合加密大量数据。其主要挑战在于密钥的安全分发——任何持有该密钥的人都能解密消息。

    Common examples of symmetric ciphers include the Data Encryption Standard (DES), Triple DES (3DES), and the widely adopted Advanced Encryption Standard (AES). DES operates on 64‑bit blocks with a 56‑bit key, but it is now considered insecure due to its short key length. AES offers key lengths of 128, 192, or 256 bits and works on 128‑bit blocks, providing a much higher security level.

    常见的对称密码例子包括数据加密标准 (DES)、三重 DES (3DES) 以及广泛采用的 高级加密标准 (AES)。DES 使用 56 位密钥处理 64 位分组，但由于密钥长度过短，现已被认为不安全。AES 提供 128、192 或 256 位的密钥长度，并在 128 位分组上运算，安全性显著提高。

    3. Asymmetric Encryption | 非对称加密

    Asymmetric encryption, also known as public‑key cryptography, employs a pair of mathematically related keys: a public key for encryption and a private key for decryption. Anyone can encrypt a message using the recipient’s public key, but only the holder of the corresponding private key can decrypt it. This eliminates the key‑distribution problem inherent in symmetric systems.

    非对称加密，又称公钥密码学，使用一对数学相关的密钥：公钥用于加密，私钥用于解密。任何人都可以使用接收方的公钥加密消息，但只有持有对应私钥的人才能够解密。这消除了对称系统中固有的密钥分发问题。

    Asymmetric algorithms are computationally heavier than symmetric ones, so they are often used to encrypt small amounts of data—such as symmetric keys or digital signatures—rather than entire messages. The most well‑known asymmetric algorithm is RSA, alongside elliptic‑curve cryptography (ECC).

    非对称算法的计算开销比对称算法大，因此通常用于加密少量数据——如对称密钥或数字签名——而非整条消息。最著名的非对称算法是 RSA，此外还有椭圆曲线密码学 (ECC)。

    4. Caesar Cipher | 凯撒密码

    The Caesar cipher is a historical substitution cipher where each letter in the plaintext is shifted by a fixed number of positions along the alphabet. For example, with a shift key of 3, ‘A’ becomes ‘D’, ‘B’ becomes ‘E’, and so on. The key is simply the shift value. This cipher is symmetric because the same shift is used for both encryption and decryption.

    凯撒密码是一种历史替换密码，通过将明文中每个字母沿字母表移动固定数量的位置来加密。例如，移位密钥为 3 时，’A’ 变为 ‘D’，’B’ 变为 ‘E’，以此类推。密钥就是移位值。该密码是对称的，因为加密和解密使用相同的移位数。

    Mathematically, encryption with a key k can be expressed as:

    Eₖ(x) = (x + k) mod 26

    and decryption as:

    Dₖ(y) = (y − k) mod 26

    where letters are mapped to numbers (A=0, B=1, …, Z=25). The Caesar cipher is extremely weak because there are only 25 possible keys, making it trivially susceptible to brute‑force attacks.

    数学上，使用密钥 k 的加密可表示为：Eₖ(x) = (x + k) mod 26，解密为：Dₖ(y) = (y − k) mod 26，其中字母映射为数字 (A=0, B=1, …, Z=25)。凯撒密码非常脆弱，因为只有 25 个可能的密钥，极易受到暴力破解攻击。

    5. Vigenère Cipher | 维吉尼亚密码

    The Vigenère cipher improves upon the Caesar cipher by using a keyword to determine a series of different shifts. Each letter of the keyword indicates a Caesar shift for the corresponding plaintext letter: ‘A’ represents shift 0, ‘B’ shift 1, …, ‘Z’ shift 25. When the keyword is shorter than the message, it is repeated cyclically.

    维吉尼亚密码改进了凯撒密码，使用一个关键字来决定一系列不同的移位。关键字中的每个字母表示对应明文字母的凯撒移位：’A’ 代表移位 0，’B’ 移位 1，…，’Z’ 移位 25。如果关键字短于消息，则循环重复使用。

    For instance, with keyword “KEY” (shifts 10, 4, 24), the plaintext “ATTACK” becomes:

    • A (shift 10) → K
    • T (shift 4) → X
    • T (shift 24) → R
    • A (shift 10) → K
    • C (shift 4) → G
    • K (shift 24) → I

    producing ciphertext “KXRKGI”. The Vigenère cipher resisted frequency analysis for centuries, but it is still breakable with modern techniques. It is important mainly as a historical stepping stone in the CCEA syllabus.

    例如，使用关键字 “KEY” (移位 10, 4, 24)，明文 “ATTACK” 变为：”A (移位 10) → K”、”T (移位 4) → X”、”T (移位 24) → R”、”A (移位 10) → K”、”C (移位 4) → G”、”K (移位 24) → I”，最终得到密文 “KXRKGI”。维吉尼亚密码曾抵抗了几个世纪的频率分析，但利用现代技术仍可破解。在 CCEA 大纲中它主要是一个历史性的进阶示例。

    6. Modern Symmetric Algorithms: AES | 现代对称算法：AES

    The Advanced Encryption Standard (AES) is the most widely used symmetric block cipher today. It was selected through a public competition and is standardised by NIST. AES processes data in 128‑bit blocks and supports key sizes of 128, 192, or 256 bits. The algorithm consists of several rounds (10, 12, or 14 depending on key length) of substitution, permutation, mixing, and key addition operations.

    高级加密标准 (AES) 是目前使用最广泛的对称分组密码。它通过公开竞赛选出，并由 NIST 标准化。AES 以 128 位分组处理数据，支持 128、192 或 256 位的密钥长度。该算法包括多轮 (10、12 或 14 轮，取决于密钥长度) 的替换、置换、混合和密钥加操作。

    Each round involves four stages: SubBytes (non‑linear byte substitution using an S‑box), ShiftRows (cyclic shifting of rows), MixColumns (linear mixing of columns), and AddRoundKey (XORing the state with a round key). The final round omits the MixColumns step. AES is computationally efficient in both hardware and software, and it remains secure against all known practical attacks when used with appropriate key lengths.

    每轮包含四个步骤：SubBytes (利用 S‑盒进行非线性字节替换)、ShiftRows (行循环移位)、MixColumns (列线性混合) 和 AddRoundKey (将状态与轮密钥进行异或)。最后一轮省略 MixColumns 步骤。AES 在硬件和软件上计算效率都很高，且在使用合适密钥长度时，仍能抵御所有已知的实用攻击。

    7. Modern Asymmetric Algorithms: RSA | 现代非对称算法：RSA

    RSA (Rivest–Shamir–Adleman) is the most famous public‑key cryptosystem. Its security relies on the practical difficulty of factoring the product of two large prime numbers. The key generation process selects two large primes p and q, computes n = p × q, and then calculates φ(n) = (p−1)(q−1). A public exponent e is chosen such that 1 < e < φ(n) and gcd(e, φ(n)) = 1; the private exponent d is the modular inverse of e modulo φ(n), i.e., d × e ≡ 1 (mod φ(n)).

    RSA (Rivest–Shamir–Adleman) 是最著名的公钥密码系统。其安全性依赖于分解两个大素数乘积的实际困难。密钥生成过程选择两个大素数 p 和 q，计算 n = p × q，然后计算 φ(n) = (p−1)(q−1)。选择一个公开指数 e，满足 1 < e < φ(n) 且 gcd(e, φ(n)) = 1；私密指数 d 是 e 模 φ(n) 的模逆，即 d × e ≡ 1 (mod φ(n))。

    Encryption of a plaintext message M (represented as an integer smaller than n) is:

    C = Mᵉ mod n

    Decryption is:

    M = Cᵈ mod n

    The public key is (n, e) and the private key is (n, d). Because factoring n into p and q is computationally infeasible for large properly chosen primes, an attacker cannot easily derive d from e and n. RSA is used for key exchange, digital signatures, and securing web traffic. Typical key lengths today are 2048 bits or higher.

    加密明文消息 M (表示为小于 n 的整数) 的公式为：C = Mᵉ mod n，解密为：M = Cᵈ mod n。公钥为 (n, e)，私钥为 (n, d)。由于对大且恰当选取的素数来说，分解 n 为 p 和 q 在计算上是不可行的，攻击者无法轻易从 e 和 n 推导出 d。RSA 用于密钥交换、数字签名以及保护 Web 流量。目前典型的密钥长度为 2048 位或更高。

    8. Hashing and Its Uses | 哈希及其用途

    A hash function takes an input (or ‘message’) and returns a fixed‑size string of bytes, typically a digest that appears random. Key properties of cryptographic hash functions are: determinism (same input always gives the same output), pre‑image resistance (infeasible to reverse), second pre‑image resistance (infeasible to find a different input with the same hash), and collision resistance (infeasible to find any two distinct inputs that produce the same hash).

    哈希函数接受输入 (或 ‘消息’) 并返回固定大小的字节串，通常表现为一个看似随机的摘要。密码学哈希函数的关键性质包括：确定性 (相同输入始终产生相同输出)、原像抵抗 (不可逆向推算)、第二原像抵抗 (无法找到产生相同哈希的不同输入) 以及碰撞抵抗 (无法找到任意两个不同输入产生相同哈希)。

    Common hash algorithms include MD5 (Message Digest 5) and the SHA family (SHA‑1, SHA‑256, SHA‑3). MD5 and SHA‑1 are now considered broken for security‑sensitive applications due to collision vulnerabilities. SHA‑256, part of the SHA‑2 family, is widely used today. Hashes are essential for verifying data integrity (e.g., checksums, file verification), storing passwords (with salting), and forming the basis of digital signatures.

    常见的哈希算法包括 MD5 (消息摘要 5) 和 SHA 系列 (SHA‑1、SHA‑256、SHA‑3)。由于碰撞漏洞，MD5 和 SHA‑1 在安全敏感应用中已被认为不安全。SHA‑256 属于 SHA‑2 系列，现今广泛使用。哈希对于验证数据完整性 (如校验和、文件验证)、存储密码 (结合加盐) 以及构成数字签名的基础至关重要。

    9. Digital Signatures & Certificates | 数字签名与证书

    A digital signature is created by encrypting a message hash with the sender’s private key. The recipient can verify the signature by decrypting it with the sender’s public key and comparing the resulting hash with a freshly computed hash of the received message. If they match, the signature confirms that the message was not altered and indeed originated from the holder of the private key. This provides authentication, non‑repudiation, and integrity.

    数字签名通过使用发送方的私钥加密消息哈希而创建。接收方可用发送方的公钥解密签名，并将所得哈希与刚计算的消息哈希进行比较。如果匹配，签名就确认了消息未被篡改且确实来自私钥持有者。这提供了身份验证、不可否认性和完整性。

    Digital certificates bind a public key to an identity (e.g., a domain name) and are issued by trusted Certificate Authorities (CAs). A certificate contains the owner’s public key, identity information, the CA’s digital signature, and a validity period. When you connect to a secure website, the browser verifies the certificate chain to establish trust. The most common standard for certificates is X.509.

    数字证书将公钥绑定到某个身份 (如域名)，并由受信任的证书颁发机构 (CA) 签发。证书包含所有者的公钥、身份信息、CA 的数字签名以及有效期。连接安全网站时，浏览器会验证证书链以建立信任。最常见的证书标准是 X.509。

    10. SSL/TLS Protocols | SSL/TLS 协议

    Secure Sockets Layer (SSL) and its successor Transport Layer Security (TLS) are cryptographic protocols that provide secure communication over a computer network. They operate between the application layer and the transport layer, typically securing HTTP traffic (HTTPS). The TLS handshake establishes a secure session: the client and server agree on a cipher suite, authenticate each other using certificates, and exchange a symmetric session key using asymmetric encryption (e.g., RSA or Diffie‑Hellman).

    安全套接层 (SSL) 及其后继者传输层安全 (TLS) 是在计算机网络上提供安全通信的密码协议。它们工作在应用层和传输层之间，通常用于保护 HTTP 流量 (HTTPS)。TLS 握手用于建立安全会话：客户端和服务器协商密码套件，使用证书相互认证，并通过非对称加密 (如 RSA 或 Diffie‑Hellman) 交换对称会话密钥。

    Once the handshake is complete, all subsequent data is encrypted with the agreed symmetric cipher (such as AES) using the session key. Modern servers should only support TLS 1.2 and TLS 1.3, as earlier versions have known vulnerabilities. TLS 1.3 simplifies the handshake and removes support for weak algorithms, improving both security and performance.

    握手完成后，所有后续数据使用协商好的对称密码 (如 AES) 和会话密钥进行加密。现代服务器应仅支持 TLS 1.2 和 TLS 1.3，因为早期版本存在已知漏洞。TLS 1.3 简化了握手过程并移除了对弱算法的支持，在提高安全性的同时改善了性能。

    11. Password Storage and Salting | 密码存储与加盐

    Storing user passwords in plaintext is a severe security risk. Instead, systems store a hash of the password. When a user logs in, the supplied password is hashed and compared with the stored hash. However, if two users choose the same password, their hashes will be identical, and attackers can use precomputed rainbow tables to reverse common hashes. To counter this, a random salt—a unique, random string—is appended to each password before hashing, and the salt is stored alongside the hash.

    以明文形式存储用户密码是严重的安全风险。因此，系统存储密码的哈希值。用户登录时，输入的密码被哈希化后与存储的哈希比较。然而，如果两个用户选择了相同的密码，他们的哈希值也会相同，攻击者可以使用预计算的彩虹表来逆转常见哈希。为了应对这一点，在哈希之前为每个密码附加一个随机的盐值 (一个唯一且随机的字符串)，并将盐值与哈希一同存储。

    Modern best practice uses purpose‑built key derivation functions like bcrypt, scrypt, or Argon2, which incorporate salting and are deliberately slow (key stretching) to hinder brute‑force attacks. CCEA candidates should understand why simple hashing (e.g., SHA‑256 alone) is insufficient for password storage and why salting and stretching are necessary.

    现代最佳实践使用专门设计的密钥派生函数，如 bcrypt、scrypt 或 Argon2，它们包含加盐且故意运行缓慢 (密钥拉伸)，以阻碍暴力破解攻击。CCEA 考生应理解为什么单纯的哈希 (如仅使用 SHA‑256) 不足以安全存储密码，以及为何加盐和拉伸是必要的。

    12. Encryption in Practice | 加密实践

    In real‑world systems, encryption is rarely used in isolation. A hybrid approach is common: asymmetric encryption (e.g., RSA or ECDH) is used to securely exchange a symmetric session key, and then symmetric encryption (e.g., AES) protects the bulk data transmission because of its speed. This hybrid model powers HTTPS, VPNs, secure email, and instant messaging.

    在现实系统中，加密很少单独使用。常见的一种混合方法：使用非对称加密 (如 RSA 或 ECDH) 安全交换对称会话密钥，然后利用对称加密 (如 AES) 保护海量数据传输，因为后者速度更快。这种混合模型为 HTTPS、VPN、安全电子邮件和即时通讯提供动力。

    Other considerations include perfect forward secrecy (PFS), where a session key compromise does not expose past sessions—achieved through ephemeral Diffie‑Hellman key exchange. Additionally, encryption must be complemented by proper key management, certificate lifecycle policies, and resistance to side‑channel attacks. As a CCEA student, you should be able to evaluate the strengths and weaknesses of different approaches and recommend appropriate encryption solutions for given scenarios.

    其他考量包括完美前向保密 (PFS)，即会话密钥的泄露不会暴露过去的会话——这通过临时 Diffie‑Hellman 密钥交换实现。此外，加密必须辅以完善的密钥管理、证书生命周期策略以及抵御侧信道攻击的能力。作为 CCEA 考生，你应能够评估不同方法的优势与劣势，并针对给定场景推荐合适的加密方案。

    Published by TutorHao | Computer Science Revision Series | aleveler.com

    更多咨询请联系16621398022（同微信）