5.4
Unit 5 · Securing Applications and Data

Asymmetric Cryptography

Two keys, not one. Step into the secure message exchange studio and learn how a public/private key pair lets strangers send secrets safely.

Welcome to the AgriNova Secure Message Studio. The farm needs to receive confidential orders and supplier messages from people it has never shared a secret with. Symmetric encryption needs both sides to already share one key — so how do you exchange a secret with a stranger? Asymmetric cryptography solves it with a pair of keys.

In asymmetric (public-key) encryption, each person has two mathematically linked keys: a public key that anyone may have, and a private key kept secret. Data encrypted with someone's public key can only be decrypted with their matching private key. That one-way relationship is what makes confidential messaging possible.

Two Linked Keys

A public key to share and a private key to keep secret — mathematically paired.

Encrypt to the Recipient

Lock a message with the recipient's public key; only their private key can open it.

Longer Keys, More Strength

Security rests on computational difficulty — longer keys are far harder to break.

AP Learning Objectives
  • 1Determine the appropriate asymmetric key to use when sending or receiving encrypted data.
  • 2Explain why key length impacts security.
  • 3Apply asymmetric encryption algorithms to encrypt and decrypt data.
Scenario Setup — Sending Encrypted Messages

A supplier wants to send AgriNova a confidential price list. They've never shared a secret key with the farm. Using asymmetric cryptography, the supplier encrypts with AgriNova's public key; only AgriNova's private key can decrypt it. You'll pair keys, build the message flow, choose the right key for each task, and see how key length changes strength — all on a safe, fictional system.

Big Idea

Asymmetric cryptography splits the key into a public half anyone can use to encrypt and a private half only the owner uses to decrypt. This lets parties communicate confidentially without ever sharing a secret in advance — and its safety depends on key length and computational difficulty.

What You Will Learn

You'll determine which key to use when sending vs receiving, explain why key length impacts security, and apply asymmetric encryption to send and receive a secret message — the AP Mitigate Risk skill applied to confidential communication.

Core Concept

The Public/Private Key Pair

How two linked keys enable confidential messaging, and why one direction is one-way.

Each user generates a key pair:

  • Public key: shared openly. Anyone can use it to encrypt a message to the owner.
  • Private key: kept secret by the owner. Only it can decrypt messages encrypted with the matching public key.

The golden rule for confidentiality: encrypt with the recipient's public key; the recipient decrypts with their private key. Because the keys are mathematically linked but not derivable from each other (within practical limits), publishing the public key is safe.

Public / Private Key Relationship OWNER (AgriNova) PUBLIC KEY shared with anyone used to ENCRYPT PRIVATE KEY kept secret used to DECRYPT Linked pair: what the public key locks, only the matching private key unlocks. Publishing the public key is safe; the private key never leaves the owner.
Figure 1 — A key pair: a sharable public key and a secret private key, mathematically linked.
Cause → Effect: Confidential Messaging Cause: a supplier encrypts the price list with AgriNova's public key. Effect: only AgriNova's private key can decrypt it — so even if the message is intercepted, an eavesdropper without the private key sees only ciphertext. The supplier and farm never had to pre-share a secret key. That's the power of asymmetric encryption for confidentiality.
Lab 1

Public / Private Key Pairing Lab

Click a trait, then click the key it belongs to. Sort each trait under Public or Private.

Public Key

shared openly

Private Key

kept secret

Sorted: 0 / 6
Key Vocabulary

Terms for MCQ and Encryption Analysis

Definitions you'll need for multiple choice and free-response answers.

Asymmetric Cryptography Vocabulary
TermDefinitionStudio Example
Asymmetric encryptionEncryption that uses a pair of different keys (public + private).Sending a secret to a stranger.
Public keyThe sharable key used to encrypt data to its owner.Posted on AgriNova's site.
Private keyThe secret key used to decrypt; never shared.Stays on AgriNova's server.
Key pairThe mathematically linked public + private keys.Generated together.
Encrypt (for confidentiality)Use the recipient's public key.Supplier encrypts to AgriNova.
DecryptUse the recipient's private key.AgriNova reads the message.
Key lengthNumber of bits in a key; longer = stronger.2048-bit vs 256-bit.
Computational difficultyThe huge amount of computing needed to break a key.Why long keys are safe.
ConfidentialityKeeping a message secret from unauthorized parties.The goal of encryption.
Symmetric vs Asymmetric
FeatureSymmetricAsymmetric
KeysOne shared secret keyPublic + private key pair
Encrypt withThe shared keyRecipient's public key
Decrypt withThe same shared keyRecipient's private key
Pre-shared secret?RequiredNot required
SpeedFast (big files)Slower (small data, key exchange)
public key private key key pair key length computational difficulty confidentiality
AP Exam Focus

What the Exam Wants You to Explain

Skill in focus: Mitigate Risk — pick the correct key and explain why length matters.

AP Skill Alignment — Mitigate Risk

For asymmetric encryption, AP expects you to: (1) choose the right key — encrypt with the recipient's public key, decrypt with their private key, (2) explain that confidentiality holds because only the private key can decrypt, and (3) explain that longer key length increases computational difficulty, making the encryption harder to break.

Common MCQ Traps
  • Encrypting with the sender's key instead of the recipient's public key.
  • Thinking the public key can decrypt — it only encrypts (for confidentiality).
  • Believing a longer key makes encryption faster — it's stronger, often slower.
  • Confusing asymmetric (two keys) with symmetric (one shared key).
Scenario Connection

If a stem says "a supplier wants to send AgriNova a confidential message," the correct choice is encrypt with AgriNova's public key; AgriNova decrypts with its private key. If it asks how to make it harder to break, the answer is increase the key length.

Analyst Note — Evidence Artifact
[KEY REGISTRY] agrinova-studio (fictional)
recipient: AgriNova — public key published, length 2048-bit
inbound msg: encrypted with AgriNova public key
decrypt attempt with public key: FAILED (cannot decrypt)
decrypt with AgriNova private key: SUCCESS

Read it like AP wants: the sender used the recipient's public key to encrypt; the public key cannot decrypt (only encrypt); the matching private key decrypts. The 2048-bit length means high computational difficulty — strong confidentiality.

Key Length vs Strength short easy to break medium harder long very hard longer infeasible computational difficulty ↑ Each added bit roughly doubles the work to brute-force the key.
Figure 2 — Longer keys raise computational difficulty exponentially — that's why key length impacts security.
Worked Example

Lab: Build the Encrypted Message Flow

The flagship lab. Order the steps of a confidential asymmetric message, then read the AP-style reasoning.

A confidential asymmetric message follows a precise order: the sender uses the recipient's public key to encrypt, and the recipient uses their private key to decrypt. Build the flow below for the supplier → AgriNova message, then check it against the model.

Lab 2

Encrypted Message Flow Builder

Click the steps in the order a confidential message travels from supplier to AgriNova.

STEP 1prepare
STEP 2encrypt
STEP 3send
STEP 4decrypt
Asymmetric Message Flow — supplier → AgriNova SUPPLIER writes message ENCRYPT with AgriNova PUBLIC key → ciphertext SEND over network eavesdropper sees only ciphertext DECRYPT with AgriNova PRIVATE key → reads message Public key encrypts; matching private key decrypts — confidentiality without a pre-shared secret.
Figure 3 — The full confidential message flow using the recipient's key pair.
Lab 3

Which Key Do I Use? Decision Lab

For each fictional task, choose the correct key. Instant feedback explains the reasoning.

Decided: 0 / 4
AP-Style Reasoning Walkthrough

Prompt: "A supplier must send AgriNova a confidential price list. Which keys are used, and how does this mitigate the risk of interception?"

Model answer: The supplier encrypts the price list with AgriNova's public key. Because only AgriNova's matching private key can decrypt it, an eavesdropper who intercepts the message sees only ciphertext — so confidentiality is preserved even though the two parties never shared a secret key in advance.

Strength: using a sufficiently long key (e.g., 2048-bit) makes the encryption computationally infeasible to break, because the work required grows exponentially with key length. That's why key length impacts security.

Common Mistakes

Misconceptions That Cost AP Points

Recognize the wrong answer and you'll avoid writing it.

× "Encrypt with your own public key to send a message."

For confidentiality you encrypt with the recipient's public key, so only the recipient's private key can read it.

AP trap: "sender's key" — it's the recipient's public key.

× "The public key can also decrypt the message."

For confidentiality, the public key only encrypts; decryption requires the matching private key.

AP trap: public encrypts, private decrypts.

× "A longer key makes encryption faster."

Longer keys are stronger (higher computational difficulty) but usually slower, not faster.

AP trap: length = strength, not speed.

× "Asymmetric uses one shared key like symmetric."

Asymmetric uses a pair (public + private). Symmetric uses one shared secret key.

AP trap: count the keys in the stem.

× "Sharing your public key is dangerous."

Public keys are meant to be shared; they only encrypt. Only the private key must stay secret.

AP trap: it's the private key that must be protected.

× "Asymmetric is always better than symmetric."

Each has a use: asymmetric solves key exchange/confidentiality with strangers; symmetric is faster for large data. They're often combined.

AP trap: pick the method that fits the task.

Reference & Practice Tools

Key Reference + Practice Tools

A quick-reference table plus three hands-on tools: a key-length strength meter, a send/receive simulator, and a misconception sorter.

Task → Which Key → Why
TaskKey to useWhy
Send a confidential messageRecipient's public keyOnly their private key can decrypt it.
Read a message sent to youYour private keyIt matches the public key used to encrypt.
Let others send you secretsPublish your public keySafe to share; encrypts only.
Protect against decryption by othersGuard your private keyIf leaked, confidentiality is lost.
Make encryption harder to breakIncrease key lengthRaises computational difficulty.
Lab 4

Key-Length Strength Meter

Slide to change the key length and watch how the computational difficulty — and therefore security — changes.

1024-bit
Moderate strength.
Longer keys exponentially increase the work an attacker needs — that's why key length impacts security.
Lab 5

Send / Receive Secret Message Simulator

Write a message to AgriNova. It's encrypted with AgriNova's public key and decrypted with its private key. (Classroom cipher for illustration only.)

Supplier sends
PRICE LIST ATTACHED
In transit (ciphertext)
AgriNova decrypts with private key
Notice: anyone can encrypt to AgriNova, but only AgriNova's private key recovers the message.
Lab 6

Asymmetric Misconception Sorter

Click each statement, then sort it as a Myth or a Fact. Correct placements turn green.

Myth
Fact
Sorted: 0 / 6
Practice & Wrap-Up

Mini AP Quiz + Takeaways

Five quick AP-style questions with instant feedback, then your snapshot for review.

Lab 7

Mini AP-Style Quiz

Choose the best answer. Explanations appear instantly; your score totals at the end.

5 Key Takeaways
  • 1Asymmetric cryptography uses a public key (shared) and a private key (secret) that are mathematically linked.
  • 2For confidentiality, encrypt with the recipient's public key; the recipient decrypts with their private key.
  • 3This enables secret communication without a pre-shared key — even between strangers.
  • 4Key length drives security: longer keys mean far greater computational difficulty to break.
  • 5Keep the private key secret — if it leaks, confidentiality is lost.
public key private key key pair encrypt with recipient public key decrypt with recipient private key key length computational difficulty confidentiality
Final AP Exam Tip

Memorize the rule: encrypt with the recipient's PUBLIC key, decrypt with the recipient's PRIVATE key. To strengthen it, increase the key length — more bits, more computational difficulty.

One Mistake to Avoid Never say the public key can decrypt. For confidentiality the public key only encrypts; only the matching private key can decrypt.
09
Section · 09

Practice — attempt these now.

AP-style assessments aligned to this lesson. Time them.

Topic Quiz 40 min 30 marks Pending

Unit 5 Topic 5.4 — Asymmetric Cryptography

AP-style topic practice assessment

Start
FRQ Practice 20 min 9 marks Pending

Unit 5 Topic 5.4 — Secure Message Exchange Analysis

AP-style topic practice assessment

Start