Clifford Christopher CocksCBFRS[2] (born 28 December 1950) is a British mathematician and cryptographer. In the early 1970s, while working at the United Kingdom Government Communications Headquarters (GCHQ), he developed an early public-key cryptography (PKC) system. This pre-dated commercial offerings, but due to the classified nature of Cocks' work, it did not become widely known until 1997 when the work was declassified.
As his work was not available for public review until 1997, it had no impact on numerous commercial initiatives relating to Internet security that had been commercially developed and that were well established by 1997. His work was technically aligned with the Diffie–Hellman key exchange and elements of the RSA algorithm; these systems were independently developed and commercialized.[3][4]
Cocks left Oxford to join Communications-Electronics Security Group (CESG), an arm of GCHQ, in September 1973. Soon after, Nick Patterson told Cocks about James H. Ellis' non-secret encryption,[5][6][7] an idea which had been published in 1969 but never successfully implemented. Several people had attempted creating the required one-way functions, but Cocks, with his background in number theory, decided to use prime factorization,[8] and did not even write it down at the time. With this insight, he quickly developed what later became known as the RSA encryption algorithm.[9][10]
GCHQ was not able to find a way to use the algorithm, and treated it as classified information. The scheme was also passed to the NSA.[8] With a military focus, financial considerations, and low computing power, the power of public-key cryptography was unrealised in both organisations:[5]
I judged it most important for military use. In a fluid military situation you may meet unforeseen threats or opportunities.
... if you can share your key rapidly and electronically, you have a major advantage over your opponent.
Only at the end of the evolution from Berners-Lee [in 1989] designing an open internet architecture for CERN, its adaptation and adoption for the Arpanet ... did public key cryptography realise its full potential.
-Ralph Benjamin[8]
In 1977, the algorithm was independently invented and published by Rivest, Shamir and Adleman, who named it after their initials. There is no evidence of a hint or leak, conscious or unconscious, and Cocks has dismissed the idea.[8]
The British achievement remained secret until 1997.[11]
Public revelation
In 1987, the GCHQ had plans to release the work, but Peter Wright's Spycatcher MI5 memoir caused them to delay revealing the research by ten years.[12]
24 years after its discovery, on 18 December 1997, Cocks revealed the GCHQ history of public-key research in a public talk. James Ellis had died on 25 November 1997, a month before the public announcement was made.
Identity-based encryption
In 2001, Cocks developed one of the first secure identity-based encryption (IBE) schemes, based on assumptions about quadratic residues in composite groups. The Cocks IBE scheme is not widely used in practice due to its high degree of ciphertext expansion. However, it is currently one of the few IBE schemes which do not use bilinear pairings, and rely for security on more well-studied mathematical problems.
Cocks was made a Companion of the Order of the Bath in 2008 (the citation describes him as "Counsellor, Foreign and Commonwealth Office").[15] He was awarded an honorary degree from the University of Bristol in 2008,[16] and an honorary Doctor of Science from the University of Birmingham in 2015.[17]
Clifford Cocks is distinguished for his work in cryptography. He was the first to devise a practicable implementation of public key cryptography, and more recently a practicable scheme for identity based public key encryption. Such achievements have been fundamental in ensuring the security of the world's electronic communications, security that we now take for granted.[20]
