Markdown

Encryption Algorithms - Markdown

Encryption algorithms are mathematical methods used to protect the confidentiality and integrity of data. They are classified into three main categories: symmetric encryption (secret key), asymmetric encryption (public key), and hash functions. Representative algorithms include AES, RSA, ECC, and SHA-256, which are widely used in various fields such as TLS/SSL communications, digital signatures, password protection, and blockchain. Algorithms recommended by standardization bodies such as NIST have been verified for security and performance.

encryption security cryptography AES RSA ECC SHA-256 hash function NIST

| code | slug | name | description | category | keyLength | nistStatus |
| --- | --- | --- | --- | --- | --- | --- |
| SYM-01 | aes | AES (Advanced Encryption Standard) | Current standard symmetric encryption algorithm. Fast and highly secure. | Symmetric Encryption | 128/192/256 bit | FIPS 197 approved |
| SYM-02 | chacha20 | ChaCha20 | Stream cipher developed by Google. Next-generation cipher for high-speed processing. | Symmetric Encryption (Stream Cipher) | 256 bit | RFC 8439 |
| SYM-03 | 3des | Triple DES (3DES/TDEA) | Cipher applying DES three times. Being phased out gradually. | Symmetric Encryption | 168 bit (112 bit effective) | Deprecated (phase-out by 2030) |
| SYM-04 | des | DES (Data Encryption Standard) | Old encryption standard from the 1970s. Currently prohibited from use. | Symmetric Encryption | 56 bit | Withdrawn (insecure) |
| ASYM-01 | rsa | RSA (Rivest-Shamir-Adleman) | Most widely used public-key encryption. Supports digital signatures and encryption. | Asymmetric Encryption | 2048/4096 bit | FIPS 186 approved |
| ASYM-02 | ecc | ECC (Elliptic Curve Cryptography) | Public-key cryptography achieving high security with short key lengths. Recommended for new systems. | Asymmetric Encryption | 224/256/384 bit | FIPS 186 approved |
| ASYM-03 | dsa | DSA (Digital Signature Algorithm) | NIST-standardized algorithm dedicated to digital signatures. | Asymmetric Encryption (Digital Signature) | 1024/2048/3072 bit | FIPS 186 approved (legacy) |
| HASH-01 | sha-256 | SHA-256 | Widely used secure hash function. Outputs 256-bit hash value. | Hash Function | 256 bit output | FIPS 180-4 approved |
| HASH-02 | sha-3 | SHA-3 (Secure Hash Algorithm 3) | Latest SHA series. Has a different structure from SHA-2. | Hash Function | 224/256/384/512 bit output | FIPS 202 approved |
| HASH-03 | sha-1 | SHA-1 | Vulnerable hash function with successful collision attack in 2017. Prohibited from use. | Hash Function | 160 bit output | Deprecated (insecure) |
| HASH-04 | md5 | MD5 (Message-Digest Algorithm 5) | Fast but collision-vulnerable old hash function. Use only for file checking. | Hash Function | 128 bit output | Deprecated (insecure) |
| KEX-01 | diffie-hellman | Diffie-Hellman (DH) | Protocol enabling secure key exchange. Foundation of public-key cryptography. | Key Exchange Protocol | 2048 bit or higher | SP 800-56A approved |
| KDF-01 | pbkdf2 | PBKDF2 (Password-Based Key Derivation Function 2) | Function for securely deriving keys from passwords. | Key Derivation Function | Variable | RFC 2898 / SP 800-132 |
| KDF-02 | argon2 | Argon2 | Latest standard for password hashing. Resistant to GPU attacks. | Password Hash | Variable | Recommended (PHC winner) |
| PQC-01 | ml-kem | ML-KEM (CRYSTALS-Kyber) | NIST-standardized post-quantum cryptography. Key encapsulation mechanism. | Post-Quantum Cryptography | 768/1024/1536 byte | FIPS 203 (2024) |
| PQC-02 | ml-dsa | ML-DSA (CRYSTALS-Dilithium) | NIST-standardized post-quantum digital signature algorithm. | Post-Quantum Cryptography | 1312/1952/2592 byte signature | FIPS 204 (2024) |