GovInfoSecurity.com - Information Security News, Regulations, & Education

Government Information Security Articles

The Cryptology Profession: Its Evolution, Growth, Skill Set and Career Prospects

Credit
Eligible
As a GovInfoSecurity.com annual member, this content can be used toward your membership credits and transcript tracking. Click For More Info
May 28, 2009 - Upasana Gupta, Contributing Editor
Share

"Cryptology is as old as mankind itself and dates from antiquity," says Patrick Weaden, curator at the National Cryptology Museum. People very early on realized that they needed to share certain information with certain people, so they developed devices to protect that information. Cryptology is the art and science of making and breaking codes.

William Friedman was the father of American cryptology, and his work still significantly shapes the business today. Friedman realized in the 1920's that the future of cryptology rested not just on linguistics, but on statistical analysis and mathematical skills as well, which was needed in breaking and making codes. "Perhaps Friedman's greatest achievements were with introducing the mathematical and scientific method into cryptology and producing training materials used by several generations of crypto students and professionals," Weaden says. His work greatly improved and affected both signals intelligence and information systems security.

There has been an enormous change in the cryptology profession over the past 30 years, especially with the wide use of internet and ecommerce, says Ed Dawson, vice president of the International Association of Cryptologic Research (IACR). Previously, cryptology was an area reserved mainly for government organizations such as NSA. "Now there has been wide use of cryptology in the commercial area, especially within technology and vendor companies such as RSA and PGP, who are building cryptology into their products," says Gary C. Kessler, Ed.S., CCE, CISSP, associate professor and program director in M.S. Digital Investigation Management at Champlain College. Cryptology has developed into one of the fundamental research areas in information technology today.

Click to Get Updates on the Latest Information Security News

"Data encryption and security is a huge and growing field today," Rainer Steinwandt, associate director and co-editor of the Journal of Mathematical Cryptology, says. "New companies pop up daily that need to have data encrypted; they do that with software and "keys" developed by cryptologists using mathematics".

Skill Set and Background required for Crypto Professionals

What's it take to make it in cryptology today? We polled our panel of experts, who suggest:

  • Grounded Academic Background -- An undergraduate degree with major studies in mathematics and computer science, followed by a postgraduate research degree (Master degree or PhD) in cryptology, is recommended by most experts. "Today, cryptology professionals need to be gifted in both mathematical concepts and statistical analysis, coupled with a strong background in technology, to be able to make a career in this field," Weaden says.

  • Linguistics -- Learning different languages has always been a challenge, and individuals wanting to succeed as crypto professionals need to master the language of nations that are specific threat countries to the US, Weaden says.

  • Subject Matter Expertise -- Professionals need to have a dogged determination and be willing to look at things from different perspectives. They need to be extremely well informed on the subject, which is a critical factor, and have a reservoir of creativity and balance to do well as crypto experts. "A practitioner has a very important role to make sure cryptology is used in the correct way. Otherwise, there are many amateurs who make serious errors in implementing and designing security systems" Dawson says.

  • Research Abilities -- Crypto professionals more than often are required to come up with new mathematical concepts and methodologies that are challenging and ensure additional security of mechanisms and products, Kessler maintains. Therefore, they need to be geared toward analysis and research.

Roles and Career Paths for Crypto Professionals

Kessler mentions that the role for this field basically falls under two main categories:

Crypto Practitioners are engaged in building additional mechanisms and products that are meant to be more secure via cryptology methods. This role is not just focused on restricting information and keeping it a secret, but more on keeping up with the upcoming technologies and creatively using these mathematical concepts to safe guard assets.

Crypto Analysts usually play a research role and come up with new mathematical concepts, models and methodologies, which these practitioners can use in building secure products and mechanisms.

"It is difficult to predict the career path for crypto practitioners, since so many changes are taking place, making it hard to predict. But a growing field is digital forensics, where there is a strong usage and need for crypto professionals," says Kessler.

Crypto FAQ's
Among the common questions about careers in cryptology:


1 | 2