Topic
Encryption
Encryption transforms readable data into a protected representation that requires authorized cryptographic material to recover the original information.
At a glance
- Protected form
- Ciphertext
- Secret material
- Cryptographic key
Overview
Encryption is used to protect information stored on devices and information moving across networks. Modern systems rely on published cryptographic algorithms and carefully managed keys rather than secret homemade algorithms. The protection provided by encryption depends on the algorithm, key management, implementation, and the points at which data is available in readable form.
Data at rest and in transit
Storage encryption protects data kept on media, while transport encryption protects communication between endpoints. These address different exposure paths, so a system may need both when sensitive information is stored and also transmitted.
Encryption is not complete access control
Once an authorized application decrypts data, ordinary application permissions still determine what a user or process may do with it. Strong encryption cannot compensate for an application that willingly exposes decrypted information to an unauthorized requester.
Sources and review
MOOR's explanatory text is supported by the following source links.