Editing Link encryption

{{Short description|Encryption of network traffic for security}}
{{more citations needed|date=June 2023}}
'''Link encryption''' is an approach to [[communications security]] that [[encryption|encrypts]] and decrypts all [[network traffic]] at each network routing point (e.g. [[network switch]], or node through which it passes) until arrival at its final destination. This repeated decryption and encryption is necessary to allow the routing information contained in each transmission to be read and employed further to direct the transmission toward its destination, before which it is re-encrypted. This contrasts with '''[[end-to-end encryption]]''' where internal information, but not the header/routing information, is encrypted by the sender at the point of origin and only decrypted by the intended recipient.

Link encryption offers two main advantages:<ref>{{Cite web |title=What does Link Encryption mean? {{!}} Security Encyclopedia |url=https://www.hypr.com/security-encyclopedia/link-encryption |access-date=2023-05-25 |website=www.hypr.com |language=en}}</ref>
* encryption is automatic so there is less opportunity for [[human error]].
* if the communications link operates continuously and carries an unvarying level of traffic, link encryption defeats [[traffic analysis]].

On the other hand, end-to-end encryption ensures only the intended recipient has access to the [[plaintext]]. Link encryption can be used with end-to-end systems by [[superencryption|superencrypting]] the messages. '''Bulk encryption''' refers to encrypting a large number of circuits at once, after they have been [[multiplexing|multiplexed]].

==References==
<references />

[[Category:Cryptography]]


{{crypto-stub}}