Encryption in Digital Systems

Encryption protects a digital question paper by converting readable content into an unreadable form. A cryptographic algorithm uses a key to transform the original text, called plaintext, into ciphertext, which can be restored to readable form only with the appropriate decryption key.

How encryption protects the paper

The central protection is confidentiality: obtaining an encrypted file should not enable an unauthorised person to read its contents without the required key.

• In symmetric encryption, the same secret key is used to encrypt and decrypt the paper; the Advanced Encryption Standard, or AES, is a standard example.
• In asymmetric cryptography, a mathematically related public-private key pair can help securely establish or transport the secret key used to protect the document.
• Security depends on a sound algorithm, secure implementation and strong keys, rather than on keeping the algorithm itself secret.

Protection during storage and transmission

A question paper needs protection throughout its digital journey, not merely while it is being sent.

• Encryption at rest protects papers stored on servers, computers or backup media against disclosure if encrypted files or storage devices are obtained without the keys.
• Encryption in transit protects papers while they move across networks, reducing the risk that intercepted communications reveal their contents.
• These protections must work together: an encrypted transfer does not protect a readable copy subsequently saved on an insecure computer.

Why key management is essential

Key management determines whether encryption provides effective protection. A person who obtains both the encrypted paper and its usable key may be able to read the paper.

• Keys should be generated securely and protected against unauthorised access, rather than distributed alongside the encrypted paper without separate safeguards.
• Access control should restrict who can obtain or use decryption keys, with permissions limited to operational needs.
• Controlled release of decryption capability close to the authorised examination time can reduce the period during which readable papers are available.

What encryption cannot do alone

Encryption is one layer of security, not a complete guarantee against examination leaks.

• Authenticated encryption adds detection of unauthorised changes; confidentiality-only encryption does not by itself establish that a paper is unaltered.
• Once an authorised user decrypts a paper, encryption cannot prevent that person from photographing, printing or sharing its readable contents.
• Endpoint security, access logs and secure printing procedures remain necessary because compromised devices or insider misuse can bypass the protection of encrypted files.