Paul282, this has been bothering me for a few months now
This "Brute Force" business; How would a computer "know" that it actually decoded the data since every permutation will yield some output? What if the server (in a login type scenario) just locked you out after say 3 failed attempts?
What scenarios of encryption allow brute force to work?
Encryption Answers and Questions
I am new to encryption also, however, I did find "The Code Book" by Simon Singh, to be very good.
It explains how PGP works and how you can give a public key to everybody, so that they can encrypt stuff with it. Then send the encrypted stuff to you and you can decrypt it. That way, only the person who wants to use the encrypted stuff has to know the real key. Anyone can encrypt stuff to you, and you can decrypt it. The magic part is how nobody would be able to figure out your private key (the one u use to decrypt stuff) from your public key! Very cool. Currently, the only way to decrypt it is by factoring very large numbers, which is very slow, so it would take a very long time to crack the cipher.
PGP uses RSA (a type of encryption) and IDEA (another type), at least in the old form. Therefore, it isn't really it's own type of encryption, not really. The main text is encrypted using RSA with some random key, and then that key is encrypted with IDEA using your public key. The whole thing seems pretty far fetched, but get the book, it's very cool.
I do have a question. Does anyone know how to deal with really really big numbers, like 10^300 (10 with 300 zeros)? There's gotta be a way.