Southern Utah University

Course Syllabus

Southern Utah University
Southern Utah University
Fall Semester 2025

Practical Cryptography (Face-to-Face)

CYBR 3400-01

Course: CYBR 3400-01
Credits: 3
Term: Fall Semester 2025
Department: CSIS
CRN: 30396

Course Description

Concepts of cryptographic protocols and their use in real-world cryptographic and authentication systems. Focus is on the practical use of established cryptographic standards and suites and issues that occur when used improperly. (Fall) [Graded (Standard Letter)] Prerequisite(s): CYBR 2750 - Prerequisite Min. Grade: C-

Required Texts

Serious Cryptography, Jean-Phillipe Aumasson, No Starch Press, ISBN 9781492067511 - https://learning.oreilly.com/library/view/serious-cryptography/9781492067511/

Modern Cryptography for Cybersecurity Professionals, Lisa Bock, Packt Publishing, ISBN 9781838644352 - https://learning.oreilly.com/library/view/modern-cryptography-for/9781838644352/

Learning Outcomes

  1. Describe cryptographic protocols and determine which to use in a given circumstance
  2. Explain what can go wrong with cryptographic protocols
  3. Implement VPNs, SSL servers, SSH servers and other cryptographic software
  4. Evaluate strengths and weaknesses of various network security protocols

Course Requirements

You will have various reading assignments given throughout the semester, with associated weekly quizzes
You will have about 6 hands-on assignments during the semester.
You will have two exams during the semester, at approximately midterm and at the end of the semester.
You will have a group presentation due during the last few weeks of the course.


Grade Structure - Item | Points
 | Quizzes (14 @ 20 pts), lowest dropped  | 260
 | Homework (6 @ 40 pts)  | 240
 | Exam or Assessment 1  | 100
 | Exam or Assessment 2 (Final, non-comprehensive)  | 100
 | Protocol Presentation  | 150
 | TOTAL  | 850

Course Outline

Module 1 - Crypto history and fundamentals, classical ciphers, terminology
Module 2 - Random numbers, hard problems in computing, provable vs. heuristic security
Module 3 - Introduction to current algorithms, AES & Feistel networks, block ciphers
Module 4 - Stream ciphers, uses and theory
Module 5 - Hashing and authenticated encryption
Module 6 - Public key cryptography, algorithms and uses
Module 7 - hard problems in computing, RSA and Diffie-Hellman, ECC algorithms
Module 8 - SSL and TLS algorithms
Module 9 - Email cryptography, PGP & SMIME, DKIM, SPF
Module 10 - SSH protocol and uses
Module 11 - VPN technologies and uses
Module 12 - Quantum Cryptography
Module 13 - Wrap up and future of cryptography
Module 14 - Protocol presentations, topics chosen by students, involve a cryptographic protocol

Instructor's policies on late assignments and/or makeup work

 If you miss an exam without a valid excuse, you will receive a grade of zero.   If the absence is excused, I will allow a retake of the exam.

There is a standing extra credit opportunity to write a paper, worth approximately the same as one assignment.  If you would like to do an extra credit assignment, you will need to submit a proposal of what topic related to security you'd like to research, and a date by which you will have it completed.  It will need to be about 15-18 pages long; e.g., longer than most assignments.  Be aware that I will expect more for extra credit than for actually completing regular assignments.

You're responsible for submitting your assignments on time.  Late assignments will be penalized 10% per day late, and will not be accepted more than 72 hours after the due date.  All assignments are to be submitted to the appropriate place in Canvas.

Your assignment will receive a grade of zero for the following:

    Submissions attached to the comments in Canvas
    Submissions that are copied from other sources, including other students
    Individual assignments done as a group
    Assignments that you forgot to submit
    Assignments obviously done by someone other than the enrolled student

Under no circumstances will work or extra credit be accepted after the last day of classes.

Attendance Policy

Attendance is generally not required for this course.  You are an adult, and are paying for the class, it's up to you as to whether you want the additional richness of information that comes with attending the class.

There may be in-class exercises, there is no makeup for such assignments.

AI Policy

You may use AI for any purpose during this course.  In fact, I encourage it, with the single stipulation that you tell me you used it, and give a brief explanation of how, and whether it helped you or not.  Yes, this means a little more writing on your part!

At the instructor's sole discretion, extra credit may be awarded for an especially novel use of an AI engine, accompanied by a good writeup.

That said, I don't think it will be especially useful for most assignments in this course.

Course Fees

No additional fees

ADA Statement

Students with medical, psychological, learning, or other disabilities desiring academic adjustments, accommodations, or auxiliary aids will need to contact the Disability Resource Center, located in Room 206F of the Sharwan Smith Center or by phone at (435) 865-8042. The Disability Resource Center determines eligibility for and authorizes the provision of services.

If your instructor requires attendance, you may need to seek an ADA accommodation to request an exception to this attendance policy. Please contact the Disability Resource Center to determine what, if any, ADA accommodations are reasonable and appropriate.

Academic Credit

According to the federal definition of a Carnegie credit hour: A credit hour of work is the equivalent of approximately 60 minutes of class time or independent study work. A minimum of 45 hours of work by each student is required for each unit of credit. Credit is earned only when course requirements are met. One (1) credit hour is equivalent to 15 contact hours of lecture, discussion, testing, evaluation, or seminar, as well as 30 hours of student homework. An equivalent amount of work is expected for laboratory work, internships, practica, studio, and other academic work leading to the awarding of credit hours. Credit granted for individual courses, labs, or studio classes ranges from 0.5 to 15 credit hours per semester.

Academic Freedom

SUU is operated for the common good of the greater community it serves. The common good depends upon the free search for truth and its free exposition. Academic Freedom is the right of faculty to study, discuss, investigate, teach, and publish. Academic Freedom is essential to these purposes and applies to both teaching and research.

Academic Freedom in the realm of teaching is fundamental for the protection of the rights of the faculty member and of you, the student, with respect to the free pursuit of learning and discovery. Faculty members possess the right to full freedom in the classroom in discussing their subjects. They may present any controversial material relevant to their courses and their intended learning outcomes, but they shall take care not to introduce into their teaching controversial materials which have no relation to the subject being taught or the intended learning outcomes for the course.

As such, students enrolled in any course at SUU may encounter topics, perspectives, and ideas that are unfamiliar or controversial, with the educational intent of providing a meaningful learning environment that fosters your growth and development. These parameters related to Academic Freedom are included in SUU Policy 6.6.

Academic Misconduct

Scholastic honesty is expected of all students. Dishonesty will not be tolerated and will be prosecuted to the fullest extent (see SUU Policy 6.33). You are expected to have read and understood the current SUU student conduct code (SUU Policy 11.2) regarding student responsibilities and rights, the intellectual property policy (SUU Policy 5.52), information about procedures, and what constitutes acceptable behavior.

Please Note: The use of websites or services that sell essays is a violation of these policies; likewise, the use of websites or services that provide answers to assignments, quizzes, or tests is also a violation of these policies. Regarding the use of Generative Artificial Intelligence (AI), you should check with your individual course instructor.

Emergency Management Statement

In case of an emergency, the University's Emergency Notification System (ENS) will be activated. Students are encouraged to maintain updated contact information using the link on the homepage of the mySUU portal. In addition, students are encouraged to familiarize themselves with the Emergency Response Protocols posted in each classroom. Detailed information about the University's emergency management plan can be found at https://www.suu.edu/emergency.

HEOA Compliance Statement

For a full set of Higher Education Opportunity Act (HEOA) compliance statements, please visit https://www.suu.edu/heoa. The sharing of copyrighted material through peer-to-peer (P2P) file sharing, except as provided under U.S. copyright law, is prohibited by law; additional information can be found at https://my.suu.edu/help/article/1096/heoa-compliance-plan.

You are also expected to comply with policies regarding intellectual property (SUU Policy 5.52) and copyright (SUU Policy 5.54).

Mandatory Reporting

University policy (SUU Policy 5.60) requires instructors to report disclosures received from students that indicate they have been subjected to sexual misconduct/harassment. The University defines sexual harassment consistent with Federal Regulations (34 C.F.R. Part 106, Subpart D) to include quid pro quo, hostile environment harassment, sexual assault, dating violence, domestic violence, and stalking. When students communicate this information to an instructor in-person, by email, or within writing assignments, the instructor will report that to the Title IX Coordinator to ensure students receive support from the Title IX Office. A reporting form is available at https://cm.maxient.com/reportingform.php?SouthernUtahUniv

Non-Discrimination Statement

SUU is committed to fostering an inclusive community of lifelong learners and believes our university's encompassing of different views, beliefs, and identities makes us stronger, more innovative, and better prepared for the global society.

SUU does not discriminate on the basis of race, religion, color, national origin, citizenship, sex (including sex discrimination and sexual harassment), sexual orientation, gender identity, age, ancestry, disability status, pregnancy, pregnancy-related conditions, genetic information, military status, veteran status, or other bases protected by applicable law in employment, treatment, admission, access to educational programs and activities, or other University benefits or services.

SUU strives to cultivate a campus environment that encourages freedom of expression from diverse viewpoints. We encourage all to dialogue within a spirit of respect, civility, and decency.

For additional information on non-discrimination, please see SUU Policy 5.27 and/or visit https://www.suu.edu/nondiscrimination.

Pregnancy

Students who are or become pregnant during this course may receive reasonable modifications to facilitate continued access and participation in the course. Pregnancy and related conditions are broadly defined to include pregnancy, childbirth, termination of pregnancy, lactation, related medical conditions, and recovery. To obtain reasonable modifications, please make a request to title9@suu.edu. To learn more visit: https://www.suu.edu/titleix/pregnancy.html.

Disclaimer Statement

Information contained in this syllabus, other than the grading, late assignments, makeup work, and attendance policies, may be subject to change with advance notice, as deemed appropriate by the instructor.