Understanding Secure Socket Layer (SSL) 128-bit encryption

Chunks of data move around over the Internet in data "envelopes" known as packets. A typical message is broken into multiple packets before being sent out across the Internet. Different individual packets may take different routes to reach their destination. When all the packets arrive at the destination computer, they are reassembled into the original message. It is possible for data packets to be intercepted by an unauthorized third party somewhere along the way between their source and destination. For most routine communications, it doesn't matter much if someone manages to intercept and read a few data packets. However, some Internet communications (for example financial information) need greater security protection. Secure Socket Layer (SSL) provides that protection by encrypting data as it is exchanged between computers.

SSL scrambles (or encrypts) data using a code (also referred to as a key) that is known only to the data's sender and recipient. The encrypted data is unintelligible unless it is unscrambled using the correct key. Regardless of the path the data takes on the Internet, it remains secure because only the intended recipient has the key that will unlock the data. SSL technology is widely accepted and used in Web browsers and a variety of other Internet software.

The strength of the SSL encryption is based on the size of the key used to encrypt the data. The larger the key, the harder it is to crack the code. Most web browsers are equipped with 40-bit SSL encryption by default. Serious online shopping and similar applications use SSL encryption with 128-bit keys (that's 2 raised to the 128th power).

Compare this to a briefcase that incorporates a lock with three combination wheels containing the numbers 0 through 9. It would take several hours to try each of the 1000 possible combination from 000 to 999 to discover the correct combination to unlock the briefcase. Now, imagine the time it would take to pick the lock of a briefcase that had a 128-bit lock. You could never fit 128 little wheels on a briefcase, but you could represent the same range of numbers with 32 wheels that each have 16 positions (the numbers 0 through 9, plus the letters A through F). The number of possible number combinations is astronomical; 309,485,009,821,345,068,724,781,056 to be exact. With such a large number, it is practically impossible for someone to decipher the key that protects the data.

The latest versions of all web browsers include support for state-of-the-art SSL encryption technology. Data vendors, such as online merchants, who want to implement secure Internet applications use this technology to seamlessly manage the entire SSL process. When your Web browser connects to a secure Web server using SSL, the browser displays a small padlock icon in the status bar at the bottom of the browser window. That way, you know when the data traveling back and forth between your browser and the vendor's Web site is being protected with SSL encryption.

 Close this Window