DEV Community πŸ‘©β€πŸ’»πŸ‘¨β€πŸ’»

Lane Wagner
Lane Wagner

Posted on • Originally published at qvault.io on

Why is Exclusive Or (XOR) Important in Cryptography?

If you are getting into cryptography, or just trying to understand the fundamentals, you may have noticed that the exclusive-or operation is used quite often, especially in ciphers.

What is XOR ( βŠ• )?

XOR, or β€œexclusive or” operates on binary data. It returns true if both of its inputs are opposites (one false and one true), otherwise, it returns false.

XOR example

An example in go code would be something like:

func exclusiveOr(a bool, b bool) bool {
    return a != b
}
Enter fullscreen mode Exit fullscreen mode

XOR Cipher – The Perfect Cipher

The XOR operation can be used as a simple cipher for encrypting and decrypting messages with a single key. This is known as symmetric encryption.

It is interesting to note that if:

  1. The key is the same size as the message
  2. The key is kept secret and generated truly randomly

Then the cipher is impossible to crack. This is known as a one time pad. However, a simple XOR shouldn’t be used in production due to the key length needing to be too long to be practical.

Cipher Example

As a simple example, let’s encrypt the word β€œhi”

  1. Convert β€œhi” to binary, here is a free tool: https://www.rapidtables.com/convert/number/ascii-to-binary.html)
01101000 01101001
Enter fullscreen mode Exit fullscreen mode
  1. Create a random secret key that has the same length:
01010010 01000101
Enter fullscreen mode Exit fullscreen mode
  1. Create an encrypted message by XOR’ing the message and the key:
01101000 01101001 ("hi") XOR 01010010 01000101 (secret key) = 00111010 00101100 (encrypted message)
Enter fullscreen mode Exit fullscreen mode
  1. Decrypt the message by XOR’ing the key with the encrypted message again:
00111010 00101100 (encrypted message) XOR 01010010 01000101 (secret key) = 01101000 01101001 ("hi")
Enter fullscreen mode Exit fullscreen mode

Why does it work?

XOR works as a cipher because it is its own inverse.

π‘Ž = (π‘Ž βŠ• 𝑏) βŠ• 𝑏

And, as we demonstrated in our example:

encrypted = message βŠ• key

and

message = encrypted βŠ• key

Is XOR used in production ciphers?

The simple XOR cipher isn’t used in production because it is impractical to use keys that are the same length as the message body. However, the XOR is still extremely useful. In fact, it is used in almost all symmetric encryption algorithms. XOR is the primary operation in the β€œadd round key” step of AES-256. It is also used in the DES cipher.

Thanks For Reading

Lane on Twitter: @wagslane

Lane on Dev.to: wagslane

Download Qvault: https://qvault.io

The post Why is Exclusive Or (XOR) Important in Cryptography? appeared first on Qvault.

Top comments (3)

Collapse
 
davidpaine profile image
David Paine

Thanks for sharing. The information is really helpful.
For the text to binary translation, here is another link, check it out
dnschecker.org/text-to-binary-tran...

Collapse
 
skrish2017 profile image
Shashi

Good piece. Thank you!

Collapse
 
finrodfelagundll profile image
finrodfelagund

Thanks for the lesson.

12 Rarely Used Javascript APIs You Need

Practical examples of some unique Javascript APIs that beautifully demonstrate a practical use-case.