Link encryption is an approach to communications security that encrypts and decrypts all network traffic at each network routing point (e.g. network switch, or node through which it passes) until arrival at its final destination. This repeated decryption and encryption is necessary to allow the routing information contained in each transmission to be read and employed further to direct the transmission toward its destination, before which it is re-encrypted. This contrasts with end-to-end encryption where internal information, but not the header/routing information, is encrypted by the sender at the point of origin and only decrypted by the intended recipient.
Link encryption offers two main advantages:
- encryption is automatic so there is less opportunity for human error.
- if the communications link operates continuously and carries an unvarying level of traffic, link encryption defeats traffic analysis.
On the other hand, end-to-end encryption ensures only the intended recipient has access to the plaintext.
Link encryption can be used with end-to-end systems by superencrypting the messages.
Bulk encryption refers to encrypting a large number of circuits at once, after they have been multiplexed.
References