Mark Band 3 – High Level (7–9 marks)
The candidate demonstrates a thorough knowledge and
understanding of encryption and hashing and how they can be used to store data and communicate securely. The material is generally accurate and detailed.
The candidate is able to apply their knowledge and understanding directly and consistently to the context provided. Evidence/examples will be explicitly relevant to the explanation.
The candidate is able to weigh up both technologies which results in a supported and realistic judgement covering when each can be used. This is well balanced.
There is a well-developed line of reasoning which is clear and logically structured. The information presented is relevant and substantiated.
Mark Band 2 – Mid Level (4–6 marks)
The candidate demonstrates
reasonable knowledge and
understanding of encryption and hashing and how they can be used to store data and communicate securely; the material is generally accurate but at times underdeveloped.
The candidate is able to apply their knowledge and understanding directly to the context provided although one or two opportunities are missed. Evidence / examples are for the most part implicitly relevant to the explanation.
The candidate makes a reasonable attempt to come to a conclusion showing some recognition of either technology. This may not be well- balanced, covering one side significantly more than the other, although both sides will be present.
There is a line of reasoning presented with some structure. The information presented is in the most part relevant and supported by some evidence.
Mark Band 1 – Low Level (1–3 marks)
The candidate demonstrates a basic knowledge of encryption or/and hashing and how they can be used to store data and communicate securely; the material is basic and contains some inaccuracies. The candidate makes a limited attempt to apply acquired knowledge and
understanding to the context provided.
The candidate provides nothing more than unsupported assertions. Any discussion will be almost entirely one- sided.
The information is basic and communicated in an unstructured way. The information is supported by limited evidence and the relationship to the evidence may not be clear.
0 mark
No attempt to answer the question or response is not worthy of credit.
Guidance
The following shows example content that may form part of a candidate’s answer. It is not intended to be an exhaustive resource, nor should a candidate be expected to specifically cover any particular amount of this.
Knowledge (AO1)
- Encryption converts data into data that cannot beunderstood (ciphertext) using a key.
- Symmetric encryption uses the same key for bothencryption and decryption
- Asymmetric encryption uses two keys, one forencryption, one for decryption
- Encryption is two-way, so data can be restored tooriginal form, but key is required.
- Hashing is a one-way (non- reversible) mathematicalprocess that produces a value from the input value.
Application (AO2)
- For robot’s data storage, symmetric encryption isuseful as no keys to share/transmit.
- For robot-robot/user communication, asymmetricencryption / public key encryption means that onlythe public key needs to be shared. Data can beencrypted/decrypted with this while the private key iskept secure
- Also possible to verify identity of sender / origin ofdata using asymmetric encryption.
- Hashing is useful for information (e.g. password) thatneeds to be verified but does not need to be knownat any point; once hashed, it is impossible to returnto it.
Evaluation (AO3)
- Encryption useful for most data storage as anyonehacking into the robot will not be able toread/understand the data.
- Hashing is useful for data storage of password /other items that need to be verified, hash of inputcompared against hash stored to confirmcorrectness.
- Hashing is not useful for data that needs to bereturned to the user as impossible to return to.
- Encryption useful for data transmission as dataintercepted cannot be decrypted without the key.
Examiner’s Comments
Most candidates could name symmetric and asymmetric encryption and state how the keys in each were used as well as being able to show a basic understanding of hashing being irreversible but few could apply that to the question. Many talked about hash
tables although the question states that hashing is used to secure the data.