Rate this article: 
(16 votes, average: 4.69)
Loading...
What does “128 bit encryption” mean? Is it safe enough foryour business and customers?
There are two possible reasons why you’re reading this post right now. The first is that you’re exploring SSL certificate options, and you stumbled across the term “128 bit SSL encryption.” The second possible case could be that you came across this term on an ecommerce site or somewhere else, and your sheer curiosity led you here.
In either case, you’ll have a good enoughidea about 128 bit SSL encryption.
Before We Can Discuss 128 Bit SSL Encryption, Let’s First Understand How an SSL Certificate Works
An SSL certificate protects your privacy byencrypting the data between a client (usually a web browser) and a web server.Thus, it prevents an ill-intended third party from stealing and tampering with thedata in transit. Such security is necessary to protect users’ sensitive datasuch as credit card information, passwords, personal messages, etc.
But how does it work? Let’s break down thisprocess into two basic steps:
1. First Contact and Validation
When you visit a website through your webbrowser, it checks to see whether there’s an SSL certificate installed. Iffound, both the parties begin the communication process known as the SSL/TLS handshake.Once contact is established, the web browser validates the authenticity of theSSL/TLS certificate installed on the web server.
This communication between client and server is done through a cryptographic technique called asymmetric encryption, or what’s also known as public key encryption. This encryption method involves two keys for the encryption and decryption of the data. Public and private keys are different, yet they’re mathematically related to each other. The public key, as the name suggests, is public and is used by the client to encrypt the information. The private key, on the other hand, is kept by the server and is used to decrypt data.
2. The Encryption Process
Asymmetric encryption, through the use ofthe two keys, provides a unique way to validate the identities of both parties.Although this method is a more secure way of protecting the information, ittakes significantly more time to encrypt and decrypt the data than anotherencryption method we’ll talk about momentarily. This would ultimately result inslower communication irrespective of internet speed. In other words, it’s notpractical to use asymmetric encryption for each bit of information. But theproblem is that we need it for validation of both the parties.
So, what’s the answer to this issue? The solution comes in the form of a session key — a generated third key that’s used for the remainder of the secure connection. This unique key is formed by both parties (server & client) and used for encryption for the rest of the session. This is called symmetric encryption.
The length key is usually of 128 or 256bits, something we know you’re curious about since you’re still here and readingthis article.
So, What Does 128 Bit Mean?
128 bit refers to the length of thesymmetric encryption key (session key) that are used for encryption purpose.The higher the key length, the harder it’s for a hacker to crack it as there’sonly one way to break this key — through trial and error (a brute-force attack,if you want to be technical). So, if an SSL certificate has a symmetric key of128 bit length, it’ll have 2128 possible combinations — which is aHUGE number!
To crack this key, one must try most ofthese combinations.
Here are a few estimates for how long itwould take to crack keys of various lengths:
| Key Size | Time to Crack |
| 56-bit | 399 Seconds |
| 128-bit | 1.02 x 1018 years |
| 192-bit | 1.872 x 1037 years |
| 256-bit | 3.31 x 1056 years |
Yes, with the computational capabilities ofexisting technologies, it’s impossible to crack the 128 bit key into ameasurable timeframe. Even the fastest supercomputers in the world can’t doanything about it. So, your data is in safe hands.
Key Length Matters — But That’s Not All
As you can see in the above table, it’sharder to crack keys of higher lengths. However, don’t automatically assumethat because you’re using 128-bit key that it means your encryption strength is128 bits. That’s because, right now, you could be using 40-bit encryption with128-bit SSL. Yes, that’s certainly possible if you haven’t configured your webserver for 128-bit SSL encryption. The capabilities of your server and browserplay a major role in determining the encryption strength.
So, to implement 128-bit SSL encryption,you must first configure your web server accordingly. Otherwise, you won’t achievethe full encryption strength your certificate is capable of.
Final Word
The higher the key length, the harder it isto crack — this is the general rule of thumb that you need to remember. Thesedays, most of the certificate authorities that issue SSL certificates havemigrated from 128-bit to 256-bit as a standard for better security. However,cracking either of them is an impossible task until quantum computers comeknocking. Until then, it’s all good.
TYPES OF SSL CERTIFICATES
Save Up to 85% on Comodo SSL Certificates
Get Comodo SSL certificates starting for as little as $7.27 per year!
Shop Now
encryption
Related posts:
- 128 Bit vs 256 Bit Encryption SSL: What You Need to Know
- Is It Safe to Use 256 Bit SSL Encryption for Website Security?
- Hashing vs Encryption — Simplifying the Differences
- How to Fix the NET::ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN Google Chrome Error
- Best WooCommerce SSL Provider — Get Up to 80% Off on WooCommerce SSL
- What is A Root CA Certificate and How Do I Download It?
- 6 SSL Certificate Best Practices to Improve Your Website Security
My expertise in encryption and SSL certificates allows me to dive into the intricacies of the topic at hand. The article you mentioned does an excellent job explaining the concept of "128 bit encryption" within SSL certificates. Let's dissect the key concepts:
SSL Certificates & Encryption
An SSL certificate safeguards data during transmission between a client (like a web browser) and a server, preventing unauthorized access to sensitive information such as credit card details or passwords.
Encryption Process:
- SSL/TLS Handshake: This initiates a secure connection between the client and server.
- Asymmetric Encryption: Involves public and private keys for encryption and decryption. Public keys encrypt data, and private keys decrypt it.
- Symmetric Encryption: A session key is generated after the handshake, used for the remainder of the secure connection. It’s faster than asymmetric encryption.
128 Bit Encryption:
- Refers to the length of the symmetric encryption key used during the session.
- The longer the key, the more combinations there are, making it exponentially harder to crack through brute-force attacks.
- A 128-bit key offers an immense number of possible combinations—2128—which is practically impossible to crack with current technology.
Key Length & Security:
- Longer key lengths (such as 256-bit) offer increased security but also demand more computational resources.
- Configuring servers and browsers properly is crucial to achieve the intended encryption strength. Using a 128-bit SSL certificate with only 40-bit encryption won't maximize security.
Final Thoughts:
- Most certificate authorities now default to 256-bit encryption for enhanced security.
- Until quantum computing becomes a reality, both 128-bit and 256-bit encryption are virtually impenetrable.
The article seems comprehensive, covering key points about encryption, SSL certificates, and their vital role in securing online communications. It emphasizes the importance of proper configuration to maximize encryption strength. Overall, it's a reliable source for understanding encryption within SSL certificates.
