Launching your learning experience…
Detailed notes on Data Transmission for Cambridge IGCSE Computer Science, covering key concepts, explanations, examples, and exam-focused revision points.
The two big families of encryption — symmetric (one shared key) and asymmetric (key pair). Each has trade-offs; modern systems combine them.
Mapped to the Cambridge IGCSE 0478 syllabus (2026-2028).
Encryption hides data so only the right key can recover it.
Encryption transforms readable plaintext into unreadable ciphertext using an algorithm and a key. Decryption reverses the process — but only with the correct key.
What encryption does:
What encryption doesn't do:
Two families:
| Family | Keys | Speed | Distribution problem |
|---|---|---|---|
| Symmetric | One shared secret | Fast | Hard — must share secret without interception |
| Asymmetric | Public + private pair | Slow | Solved — public key shared openly |
Cambridge tip. Mark scheme rewards the precise terms: PLAINTEXT, CIPHERTEXT, KEY. Use them.
One shared key. Fast. Distribution is the headache.
In symmetric encryption, sender and receiver use the SAME secret key.
Process:
Examples of symmetric algorithms:
Strengths:
Weaknesses:
Cambridge tip. Mark scheme expects the speed advantage AND the distribution problem stated.
Public + private key pair. Solves distribution; slower than symmetric.
Asymmetric encryption uses a PAIR of mathematically-related keys per party:
The relationship between the keys is one-way: data encrypted with the public key can ONLY be decrypted with the corresponding private key, and vice versa. Knowing the public key doesn't reveal the private key (it would take billions of years even with the most powerful computers).
Encrypting a message TO someone:
Even if the ciphertext AND the public key are intercepted, the message is unreadable. Only the private-key holder can decrypt.
Digital signatures (the reverse direction):
Examples of asymmetric algorithms:
Strengths:
Weaknesses:
Cambridge tip. Top-band candidates remember: encrypt with RECIPIENT'S public key; decrypt with YOUR OWN private key. Reverse for signatures (sign with YOUR OWN private; verify with sender's public).
See the full worked example for symmetric and asymmetric encryption →
Asymmetric to set up a session; symmetric for the actual data.
Modern secure communication (HTTPS, SSL/TLS, WhatsApp, etc.) combines both approaches to get the best of each.
The hybrid pattern:
Asymmetric handshake. Browser and server use asymmetric crypto to securely agree on a SHARED SYMMETRIC KEY (called a session key). The session key never travels in plaintext — it's encrypted with the server's public key.
Symmetric data exchange. Once both have the session key, they switch to symmetric encryption (fast) for all subsequent data.
End of session. Session key is discarded. Next connection generates a fresh one.
Why this works:
Where you've used this today. Every HTTPS website, every secure messaging app, every banking transaction. The padlock in your browser bar means TLS is doing exactly this.
Cambridge tip. Top-band evaluation answers note this hybrid approach. It demonstrates real-world understanding beyond textbook descriptions.
Verbatim phrases and definitions Cambridge mark schemes credit.
Encryption appears on every Paper 1. Most-tested questions: symmetric vs asymmetric (6-8 marks), public/private key direction (4-6 marks), why use encryption (4 marks). Examiner reports flag the public/private direction confusion as the #1 error.
Sources: Cambridge IGCSE Computer Science 0478 syllabus (2026-2028); 0478 Examiner Reports 2022-2024; 0478/12 May/Jun 2024 question paper and mark scheme. Last reviewed 2026-05-09.
Step-by-step solutions to past-paper-style questions on symmetric and asymmetric encryption, written exactly the way a tutor would explain them at the board.
Question
State the purpose of encryption when data is transmitted over a network. (2 marks)
Step-by-step solution
Step 1
Point 1 (1 mark). Encryption scrambles the data into ciphertext so that it cannot be understood / is meaningless to anyone without the correct key.
Step 2
Point 2 (1 mark). This protects the data IF it is intercepted — an eavesdropper sees only the meaningless ciphertext, keeping the information confidential.
Answer
Encryption converts the data into ciphertext so that, if it is intercepted, it is meaningless / unreadable without the correct decryption key — protecting the data's confidentiality.
Examiner tip
AO1. The marking point examiners want is 'meaningless / unreadable if intercepted' — not 'stops it being intercepted'. Avoid the word 'prevents interception'.
Question
Complete the sentence using the correct terms: 'An algorithm uses a ______ to convert ______ into ciphertext.' Then state what plaintext is. (2 marks)
Step-by-step solution
Step 1
Fill the blanks (1 mark). An algorithm uses a key to convert plaintext into ciphertext.
Step 2
Define plaintext (1 mark). Plaintext is the original, readable data BEFORE encryption is applied.
Answer
An algorithm uses a KEY to convert PLAINTEXT into ciphertext. Plaintext = the original readable data before encryption.
Examiner tip
AO1. Keep the three terms distinct: plaintext (before), ciphertext (after), key (the secret value the algorithm uses).
Question
Identify and explain TWO reasons why data should be encrypted. (4 marks)
Step-by-step solution
Step 1
Reason 1 — Confidentiality (2 marks). Encrypted data is unreadable without the correct key. Even if intercepted (by hackers, eavesdroppers, etc.), the data is meaningless. Protects sensitive information: passwords, payment details, personal communications.
Step 2
Reason 2 — Authentication / integrity (2 marks). Asymmetric encryption enables digital signatures: data signed with a private key can be verified by anyone using the public key. Confirms WHO sent the data and that it WASN'T MODIFIED in transit.
Answer
Two reasons: (1) confidentiality — protects sensitive data from interception; (2) authentication / integrity — confirms sender identity and detects tampering.
Examiner tip
AO2. Each reason needs an identification mark PLUS a development mark — don't just list 'confidentiality' and 'security' without explaining each.
Question
A company uses symmetric encryption to send files between two offices. Describe how symmetric encryption works and explain ONE problem it has. (4 marks)
Step-by-step solution
Step 1
How it works (2 marks). The SAME single key is used at both ends. The sending office encrypts the file with the key; the receiving office decrypts the file with the identical key.
Step 2
The problem — key distribution (1 mark). Both offices must have the same secret key, so the key itself has to be shared between them.
Step 3
Why that is risky (1 mark). If the key is sent over the network it could be intercepted; whoever obtains the key can then decrypt all the files — so distributing the key securely is difficult.
Answer
Symmetric encryption uses ONE shared key to both encrypt and decrypt. Its main weakness is the key-distribution problem: the secret key must be shared between both parties, and if it is intercepted in transit the encryption is broken.
Examiner tip
AO2. 'Same key' is the core marking point. The classic problem examiners reward is 'key distribution / sharing the key securely' — not 'it is slow'.
Question
Alice wants to send Bob an encrypted message. Both have key pairs. Explain which keys are used and why. (6 marks)
Step-by-step solution
Step 1
Alice gets Bob's PUBLIC key (1 mark). This key is openly available — Bob has shared it widely.
Step 2
Alice encrypts the message with Bob's public key (2 marks). The mathematical relationship between Bob's public and private keys means anything encrypted with the public key can ONLY be decrypted with the corresponding PRIVATE key.
Step 3
Alice transmits the ciphertext (1 mark). Even if intercepted, the message is unreadable without Bob's private key.
Step 4
Bob decrypts with his PRIVATE key (1 mark). Only Bob has the private key, so only Bob can read the message.
Step 5
Why this works (1 mark). Public keys can be shared freely; private keys never leave their owner. There's no need to share a secret — the asymmetric mathematical relationship enables secure communication without prior secret exchange.
Answer
Encrypt with RECIPIENT's public key. Recipient decrypts with their PRIVATE key. Public key is for encryption (and digital-signature verification); private key is for decryption (and signing).
Examiner tip
AO2. The discriminator is direction: encrypt with the RECIPIENT'S public key, decrypt with the RECIPIENT'S private key. Candidates who write 'encrypt with the private key' lose the bulk of the marks.
Question
Distinguish between symmetric and asymmetric encryption. Identify ONE advantage and ONE disadvantage of each. (8 marks)
Step-by-step solution
Step 1
Symmetric (2 marks). Sender and receiver share THE SAME secret key. The key is used to both encrypt and decrypt.
Step 2
Asymmetric (2 marks). Each party has a KEY PAIR: a PUBLIC key (shared openly) and a PRIVATE key (kept secret). Data encrypted with one key can ONLY be decrypted with the other in the pair.
Step 3
Symmetric advantage (1 mark). Fast — efficient for encrypting large volumes of data.
Step 4
Symmetric disadvantage (1 mark). Key distribution problem — how do you share the secret key without it being intercepted?
Step 5
Asymmetric advantage (1 mark). Solves the key-distribution problem — public keys can be shared openly.
Step 6
Asymmetric disadvantage (1 mark). Slower — much more computationally expensive than symmetric.
Answer
Symmetric: same key for encrypt/decrypt; fast but key distribution is hard. Asymmetric: public/private key pair; solves distribution but is slower. Modern systems combine: asymmetric to share a symmetric session key, then symmetric for the bulk data.
Examiner tip
AO3. Eight marks need balanced coverage: 2 for each definition + one advantage and one disadvantage each. A common slip is giving two advantages of one method and nothing for the other — keep the comparison even.
High-scoring sample answers for symmetric and asymmetric encryption on the Cambridge IGCSE 0478 paper, with examiner-style notes mapping each response to the mark scheme and assessment objectives.
State the purpose of encryption. [1]
Model answer
To make the data meaningless / unreadable (to anyone without the correct key) if it is intercepted.
Why this scores
AO1, 1 mark. Any equivalent of 'data is unreadable / meaningless if intercepted' earns it. Do NOT write 'to stop the data being intercepted' — that is the classic error; encryption does not prevent interception, only understanding.
Symmetric encryption is used to send a file. Identify how many keys are used and what each does. [2]
Model answer
ONE key is used (1). The SAME single key is used to both encrypt the file at the sending end and decrypt it at the receiving end (1).
Why this scores
AO1, 2 marks: 1 for 'one / single key', 1 for 'same key encrypts and decrypts'. The trap is implying two keys (that is asymmetric) — in symmetric the single shared key does both jobs.
Describe the main problem with using symmetric encryption. [3]
Model answer
Symmetric encryption uses a single shared key (1). Both the sender and the receiver must have a copy of that same secret key, so the key itself has to be distributed/sent to the other party (1). If the key is intercepted while it is being shared, the interceptor can decrypt all the messages — so distributing the key securely is the main weakness (the 'key-distribution problem') (1).
Why this scores
AO2, 3 marks: identify single shared key, identify that it must be shared, explain the interception risk. Naming it 'key-distribution problem' is good but the explanation must be present to score the third mark.
Asymmetric encryption uses a key pair. Describe the role of the public key and the role of the private key. [4]
Model answer
Public key (2): it is made available openly to anyone (1); it is used to ENCRYPT a message that is being sent to the owner of the key (1). Private key (2): it is kept secret by the owner and never shared (1); it is used to DECRYPT messages that were encrypted with the matching public key (1).
Why this scores
AO1, 4 marks (2 per key). Mark the key features: public = shared + encrypts; private = secret + decrypts. The most common error is swapping these — stating the public key decrypts or the private key encrypts a received message loses those marks.
Tomas wants to send a secure message to Priya using asymmetric encryption. Describe how asymmetric encryption is used to send this message securely. [5]
Model answer
Tomas obtains Priya's PUBLIC key, which is openly available (1). Tomas encrypts the message (plaintext) using Priya's public key, turning it into ciphertext (1). The ciphertext is transmitted; even if it is intercepted it is meaningless without the matching private key (1). Priya receives the ciphertext and decrypts it using her own PRIVATE key (1). Because only Priya has her private key, only she can read the message, so the message is secure (1).
Why this scores
AO2, 5 marks: get recipient's public key / encrypt with recipient's public key / transmit ciphertext / decrypt with recipient's private key / only the recipient holds the private key. The decisive discriminator is encrypting with the RECIPIENT'S (Priya's) public key — encrypting with the sender's key or with a private key is the classic mix-up and scores poorly.
Compare symmetric and asymmetric encryption. Your answer should refer to the number of keys, the key-distribution problem, and speed. [6]
Model answer
Number of keys: symmetric uses one single key shared by both parties (1); asymmetric uses a pair of keys — a public key and a private key — for each party (1). Key distribution: in symmetric encryption the shared key must be sent to the other party, so it can be intercepted (the key-distribution problem) (1); in asymmetric encryption the public key can be shared openly and the private key never leaves its owner, so there is no need to share a secret (1). Speed: symmetric encryption is faster / less computationally demanding, so it suits large amounts of data (1); asymmetric encryption is slower / more computationally expensive (1).
Why this scores
AO3, 6 marks across three comparison strands (2 each): keys, key distribution, speed. Best answers make explicit comparative statements ('symmetric uses one key WHEREAS asymmetric uses two'). The standard error is confusing which scheme has the distribution problem, or claiming asymmetric is faster — symmetric is the fast one.
Definitions to memorise and the exact keywords mark schemes credit for symmetric and asymmetric encryption answers — sharpened from recent examiner reports for the 2026 0478 sitting.
Converting plaintext into ciphertext (unreadable form) using an algorithm and a key, so it cannot be understood without the corresponding decryption key.
The original, readable data BEFORE encryption.
The unreadable data AFTER encryption.
The secret value used by an encryption algorithm to transform plaintext into ciphertext (and back).
Encryption method where THE SAME key is used to encrypt and decrypt. Fast but requires secure key distribution.
Encryption using a PAIR of keys: a public key (shared openly) and a private key (kept secret). Solves the key-distribution problem.
Half of an asymmetric key pair. Shared openly. Used by senders to encrypt; used to verify signatures.
Half of an asymmetric key pair. Kept secret. Used by the owner to decrypt and to sign.
The traps other students keep falling into on symmetric and asymmetric encryption questions — taken from recent Cambridge IGCSE 0478 examiner reports and mark schemes — and how to avoid them.
Why it happens
Both transform data.
How to avoid it
Encryption HIDES data; compression SHRINKS data. Different goals. ZIP compresses but doesn't encrypt by default. Encrypted ZIP files do BOTH.
0478 Examiner Reports 2022-2024
Why it happens
Confusing encryption direction.
How to avoid it
Encrypting a message TO someone: use their PUBLIC key. Signing a message FROM someone: use your PRIVATE key. Two different operations with different keys.
Why it happens
Loose language.
How to avoid it
Encryption doesn't prevent interception — encrypted packets can still be intercepted. It makes the intercepted data UNREADABLE without the key. Confidentiality, not invisibility.
The things students keep getting wrong in this sub-topic, answered.