What is the C839 course at WGU and what topics does it cover?

The C839 course at Western Governors University (WGU) is titled "Introduction to Cryptography," focusing on the principles and techniques involved in securing information through encryption and decryption methods.

Cryptography is not just about keeping secrets; it's a complex field that combines mathematics, computer science, and engineering to protect data integrity, confidentiality, and authenticity in various applications, ranging from secure messaging to electronic transactions.

A fundamental topic covered in C839 is symmetric cryptography, where the same key is used for both encryption and decryption, making the management of that key critical to maintaining security.

Students learn about asymmetric cryptography, which relies on two keys: a public key for encryption and a private key for decryption.

This method enables secure key exchange over insecure channels, revolutionizing secure communications since public keys can be shared openly.

The course also delves into cryptographic hash functions, which transform input data into a fixed-size string of characters.

Hash functions, like SHA-256, are critical for ensuring data integrity and are commonly used in digital signatures and password storage.

One of the historical aspects discussed is the Enigma machine, used by the Germans during World War II.

Its complexity and reliance on rotor technology made it a significant challenge for Allied codebreakers, demonstrating the importance of cryptography in warfare.

Modern cryptography heavily relies on mathematical concepts, particularly number theory, where the prime factorization of large numbers underpins the security of many encryption systems, such as RSA.

The course highlights Public Key Infrastructure (PKI), which is a framework that manages digital certificates and public-key encryption, ensuring secure digital communication and identity verification online.

Students study various encryption algorithms, including DES (Data Encryption Standard) and AES (Advanced Encryption Standard), understanding their design, strengths, weaknesses, and the differences in their key lengths and processes.

A critical security concern examined in C839 is the concept of brute-force attacks, where an attacker systematically tries all possible keys to decrypt a message.

The course explains how the complexity of the key space can determine the feasibility of such attacks.

A key component of cryptographic practice is the understanding of cryptanalysis, which involves the study of techniques for attempting to break cryptographic codes, testing the strength of encryption methods against various attack strategies.

The notion of "key management" is stressed throughout the course.

Effective key management is essential for securing cryptographic systems, which involves generating, distributing, storing, and revoking keys securely.

Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols are vital topics, as they establish secure communication channels over the internet, widely used in web transactions to protect sensitive data such as credit card information.

Students are likely exposed to real-world data breaches and vulnerabilities, analyzing how cryptography could mitigate risks in cases like the infamous Equifax breach, where sensitive personal information was compromised.

The course emphasizes the importance of staying updated on modern cryptographic standards and practices, particularly as technology advances and new vulnerabilities emerge, such as those posed by quantum computing.

Learning outcomes often include the ability to explain cryptographic principles, identify security risks, and apply theoretical knowledge to practical scenarios, preparing students for roles in information security.

Real-world applications of course material include securing both personal and organizational data, ensuring compliance with regulations such as GDPR, and maintaining the trust of consumers in digital transactions.

The understanding of legal and ethical considerations in cryptography is also covered, highlighting the balance between security measures and the potential for misuse of cryptographic tools in illegal activities.

The course may introduce students to security frameworks and models, such as the CIA triad (Confidentiality, Integrity, Availability), which serves as a foundational principle for understanding information security.