Lesson 5 of 8 · Grade 8 · Kommunikation und Sicherheit
Why WhatsApp and the padlock in the browser protect you, what end-to-end means, and how you can encrypt and crack messages yourself with the Caesar trick.
Encryption: the padlock in the browser and the Caesar trick
Every message you send passes through dozens of strangers' computers: your Wi-Fi, the router in the café, the provider, servers somewhere in the world. Without encryption, any of them could read along, like with a postcard.
Encryption turns your text (the plaintext) into an unreadable ciphertext. Only someone with the matching key can make it readable again.
Who is reading along?
Encoding is not encryption. Anyone who knows the rule can translate a QR code or Morse code back. Encryption also needs a key that only the right people have.
Encryption: the padlock in the browser and the Caesar trick
Transport encryption: the padlock in the browser (the "https"). Between your phone and the website nobody can read along, not even on open Wi-Fi. But: the operator of the website sees everything you enter there.
End-to-end encryption: WhatsApp, Signal, Threema. The message is encrypted on your phone and only decrypted again on the recipient's phone. Not even the provider can read it.
Two kinds you use every day
No padlock in the browser, or the browser warns you about the site? Then never enter a password or bank details there. No matter how real the site looks.
Encryption: the padlock in the browser and the Caesar trick
Julius Caesar already encrypted messages: every letter is shifted along the alphabet by a fixed number. The key is that number.
With key 3, A becomes D, B becomes E, H becomes K:
Plaintext: H E L L O
Ciphertext: K H O O R
Try it: encrypt your first name with key 3. At the end of the alphabet you carry on at the start, so X becomes A.
Quiz question · Join in
No answers yet.
Try it with your phone. All visitors share this demo; it starts empty again every night.
Encryption: the padlock in the browser and the Caesar trick
There are only 25 possible keys. An attacker simply tries them all. That's called brute force: not clever, but fast. A computer manages it in less than a second.
It's even faster with frequency analysis: in English, E is the most common letter. So the most common letter in the ciphertext is very likely the shifted E, and the key is already known.
Why Caesar is useless today
Exactly the same thing happens with short passwords: a computer tries every possibility. The more possible keys, the longer it takes. That's why long passwords and modern encryption with keys hundreds of digits long win.
Quiz question · Join in
No answers yet.
Try it with your phone. All visitors share this demo; it starts empty again every night.
Word cloud · Join in
In the course you unlock this question live: everyone votes with their phone via QR code, and the result appears here.
Everyday example
Zwei Freunde schicken sich im Unterricht Zettel. Damit niemand mitliest, verschieben sie jeden Buchstaben um drei Stellen: aus HALLO wird KDOOR. Der Lehrer fängt den Zettel ab und liest … Buchstabensalat.
? Wie lange braucht der Lehrer, wenn er alle 25 Verschiebungen durchprobiert?
✓ Ein paar Minuten. Deshalb reicht Caesar heute nicht mehr. Das Schloss-Symbol im Browser steht für Schlüssel, bei denen Ausprobieren länger dauern würde, als es die Welt gibt.
Simulation · Encryption: the padlock in the browser and the Caesar trick
Verschlüsselt:
Sample · lesson 5 of 8
The full course “Digitale Selbstverteidigung Klasse 8: Deine Daten, deine Geräte” has 8 lessons like this.