Computer Sciences and Information Technology
Advanced Encryption Standard
1. Use the Internet and/or Strayer Library to research (within the past year) the manner in which organizations regularly use the Advanced Encryption Standard (AES).
2. Once your research is completed, determine the most common types of organizations that use AES, examine the manner in which they use AES, and state them in a post.
3. Imagine that you are in charge of an organization similar to the ones you discovered in your research.
4. Determine whether or not you would use AES encryption for the same types of applications and comment on this in your post.
5. Justify your response.
Advanced Encryption Standard
Advanced Encryption Standard (AES) refers to an algorithm for Encryption which was picked or rather selected by the National Institute of Standards and Technology (NIST) for the government of the United States, private organizations, and commercials to help them secure sensitive unclassified information. AES is well known for encrypting one hundred and twenty-eight-bit blocks of data at a time with cryptographic keys. The length options for the encryption key include one hundred and twenty-eight, one hundred and ninety-two, and two hundred and fifty-six. Other fifteen possible encryption algorithms could have been selected by NIST, but it decided to use a limited version of the Rijndael algorithm (Abdullah, 2017). The AES was created and programmed to include data security regulations like the Federal Information Processing Standard (FIPS) series as FIPS 197.
PART ONE (research)
Organizations use AES to secure their data from attacks or rather to keep it private. In June 2003, it was announced by the government that AES was capable of protecting classified information (D’souza & Panchal, 2017). the strength and the design used in making all key lengths of the algorithm of the AES are enough to prevent classified information from attackers, and it is kept up to a secret level. One hundred and ninety-two or two hundred and fifty-six are key lengths that ensure information is kept top-secret. Some products are intended to protect the national security systems or information. Implementing of AES in these products has to be reviewed and certified by NSA before their use and acquisition. In hospitals, the patients’ electronic health records require additional crypto. There are at least two kinds of solutions, which include public key or AES. Symmetric Encryption using AES is the most suitable when it comes to enhancing privacy. However, a secure hash like SHA is also required to ensure its integrity and such algorithms use a private key. Generally, AES is used in organizations to ensure data authentication, data integrity, data security, and data reliability. Data authentication entails key cryptography, password among others. Security will entail Encryption and decryption where algorithms fall into place.
PART TWO (post)
ORGANIZATIONS THAT USE AES
• The most common types of organizations that use AES include the media especially social media like Twitter, Facebook, and zoom. They use AES to secure data or information belonging to their users.
• Scientific organizations like medical research, a prototype of supporting IT system, wireless-based partly on Bluetooth 3.0 HS+, partly on Wi-Fi.
• Google also used AES to protect its information. Once a user searches something on google, the user name will not be made to the public, among other private details.
• Commercial organizations to keep their data and finances safe.
• Hospitality organizations like hospitals use AES to keep their patients’ information discrete.
• The government uses AES to keep the information as a top-secret.
Applications used by AES
AES is used in;
• wireless security
• file encryption
• processor security
• SSL/TLS.
Recommendation
If I were in charge of an organization like the hospital, I would use AES encryption for applications like wireless security. A type of wireless security that uses AES is WPA2. The user automatically receives an encryption key that is unique after logging into the network securely. It is then automatically updated at regular intervals. I would also use file encryption, meaning that not everyone will gain access to the hospital’s information system. A secure processor would also be of great use since there are an added encryption and key management to enable the hospital systems to be more secure. Lastly, I would recommend using SSL/TLS since they are also integral parts of website security.
References
Abdullah, A. (2017). Advanced encryption standard (AES) algorithm to encrypt and decrypt data. Cryptography and Network Security, 16.
D’souza, F. J., & Panchal, D. (2017, May). Advanced encryption standard (AES) security enhancement using a hybrid approach. In 2017 International Conference on Computing, Communication, and Automation (ICCCA) (pp. 647-652). IEEE.
