What Is Encryption? Symmetric vs Asymmetric Cryptography

What Is Encryption?

Encryption is the process of converting readable data (plaintext) into an unreadable format (ciphertext) using a mathematical algorithm and a key. Only someone with the correct key can reverse the process (decrypt) and read the original data.

Encryption is the backbone of modern cybersecurity-the-internets-core-protocol)-the-backbone-of-reliable-internet-communication) — it protects data in transit (network traffic) and data at rest (stored files, databases).

Plaintext:  "Hello, World!"
   + Key + Algorithm
Ciphertext: "aG93IGFyZSB5b3U="   (unreadable without the key)

Why Encryption Matters

Without encryption:

• Anyone who intercepts your network traffic can read your passwords and messages
• Stolen databases expose every user's credentials in plain text
• Sensitive business data on lost laptops is instantly readable

With encryption:

• Intercepted traffic is useless without the decryption key
• Stolen databases are worthless if properly encrypted
• compliance-PCI-DSS-cybersecurity-compliance-frameworks-explained) requirements (GDPR, PCI-DSS, HIPAA) demand encryption of sensitive data

Symmetric Encryption

In symmetric encryption, the same key is used for both encryption and decryption. Both the sender and receiver must share this secret key securely.

Sender:   Plaintext + Secret Key → Ciphertext
Receiver: Ciphertext + Secret Key → Plaintext

Common Symmetric Algorithms

| Algorithm | Key Size | Status | Notes | |-----------|----------|--------|-------| | AES-128 | 128-bit | Secure | Modern standard | | AES-256 | 256-bit | Very secure | Preferred for sensitive data | | ChaCha20 | 256-bit | Secure | Faster on mobile/ARM | | 3DES | 168-bit | Legacy | Being phased out | | DES | 56-bit | Broken | Never use — easily cracked |

AES (Advanced Encryption Standard) is the gold standard. It is used in HTTPS-how-https-keeps-your-data-safe)-tls-how-https-keeps-your-data-safe), Wi-Fi (WPA2/WPA3), disk encryption (BitLocker, FileVault), and secure messaging apps.

Pros and Cons

| Pros | Cons | |------|------| | Very fast | Key must be shared securely — the "key distribution problem" | | Efficient for large data | If the key is compromised, all data is exposed | | Low computational overhead | Difficult to scale across many users |

Asymmetric Encryption (Public Key Cryptography)

Asymmetric encryption uses a key pair: a public key and a private key. Data encrypted with the public key can only be decrypted with the private key, and vice versa.

Public Key  → Anyone can encrypt data with it (shared openly)
Private Key → Only the owner can decrypt data (kept secret)

How It Works

Step 1: Alice generates a key pair
        Public key  → shared with everyone
        Private key → kept secret by Alice

Step 2: Bob encrypts a message using Alice's public key
        "Hello Alice" + Alice's Public Key → Encrypted message

Step 3: Only Alice can decrypt it
        Encrypted message + Alice's Private Key → "Hello Alice"

Common Asymmetric Algorithms

| Algorithm | Use Case | Key Size | |-----------|----------|----------| | RSA | HTTPS-how-https-keeps-your-data-safe)-tls-how-https-keeps-your-data-safe), email, key exchange | 2048–4096 bit | | ECC (Elliptic Curve) | TLS, mobile apps | 256–384 bit (equivalent to RSA-3072) | | Diffie-Hellman | Key exchange only | Variable | | EdDSA (Ed25519) | Digital signatures | 256-bit |

Digital Signatures

Asymmetric encryption also enables digital signatures — proving authenticity and integrity:

Alice signs: Document + Alice's Private Key → Signature
Bob verifies: Document + Signature + Alice's Public Key → Valid/Invalid

A valid signature proves the document came from Alice and has not been tampered with.

Hybrid Encryption — The Real World

Asymmetric encryption is slow for large data. Symmetric encryption is fast but has the key distribution problem. The solution: use both.

This is exactly what HTTPS-how-https-keeps-your-data-safe)-tls-how-https-keeps-your-data-safe)/TLS does:

1. Client and server exchange keys using asymmetric encryption (RSA/ECDH)
2. A shared symmetric key (AES) is established securely
3. All subsequent data is encrypted with fast AES

The asymmetric phase solves the key distribution problem. The symmetric phase provides speed.

Encryption in Practice

| Use Case | Encryption Method | |----------|-----------------| | HTTPS-how-https-keeps-your-data-safe)-tls-how-https-keeps-your-data-safe) web traffic | TLS (hybrid: ECDH + AES) | | Password storage | bcrypt-explained)), Argon2 (hashing-cryptographic-hash-functions-explained), not encryption) | | Full disk encryption | AES-256 (BitLocker, FileVault, LUKS) | | Email (PGP) | RSA + AES hybrid | | Signal / WhatsApp | Signal protocol (Curve25519 + AES) | | Wi-Fi (WPA3) | SAE + AES-GCMP-256 |

Key Terms to Know

| Term | Meaning | |------|---------| | Plaintext | Original readable data | | Ciphertext | Encrypted (unreadable) data | | Key | Secret value used to encrypt/decrypt | | Algorithm / Cipher | The mathematical process (AES, RSA) | | Key length | Longer = stronger (AES-256 > AES-128) | | hashing-cryptographic-hash-functions-explained) | One-way transformation — cannot be reversed |

Quick Recap

• Encryption converts plaintext into unreadable ciphertext using a key
• Symmetric encryption uses one shared key — fast but has the key distribution problem
• Asymmetric encryption uses a key pair (public + private) — solves key distribution, slower
• Hybrid encryption (used in TLS/HTTPS) combines both for speed and security
• AES-256 is the symmetric standard; RSA and ECC are the asymmetric standards
• Encryption protects data in transit and at rest