WHAT IS
Cryptography
• Science of protecting information by converting it into a secure form
• Ensures only authorized users can read or use data
• Secures communication and data in digital systems
• Works behind many everyday technologies
Why Do We Need Cryptography?
Keep Data Prevent Protect Secure Online
Private Unauthorized Access Communication Transactions
Build Trust in
Digital Systems
Where is Cryptography Used?
Online Banking Messaging Apps Email Security Secure Websites
Digital Payments Cloud Storage Healthcare Records Government Systems
Basic Terms in Cryptography
Plaintext Human-readable data — the original message before any encryption is applied.
Ciphertext Encrypted data — the scrambled output that is unreadable without the correct key.
Key A secret value used to lock (encrypt) or unlock (decrypt) data.
Encryption The process of converting plaintext into ciphertext to secure it.
Decryption The reverse — converting ciphertext back into its original readable form.
Symmetric-Key Cryptography
• Uses the same key for both encryption and decryption
• Fast and efficient — ideal for large volumes of data
• Challenge: both parties must securely share the secret key
• Common uses: file encryption, full-disk encryption
• Example algorithms: AES, DES, ChaCha20
Public-Key Cryptography
• Uses a key pair: one public key and one private key
• Public key is shared openly; private key is kept secret
• Eliminates the need to share a single secret key
• Enables secure communication even between strangers
• Used in: websites (HTTPS), key exchange, digital signatures, identity verification
RSA and ECC — Major Public-Key Techniques
RSA ECC — Elliptic Curve Cryptography
• Provides strong security with significantly smaller
keys
• Widely used public-key algorithm
• More efficient — faster computation, less power
• Used for both encryption and digital signatures
usage
• Security based on the hardness of factoring
• Widely adopted in modern systems and mobile
large numbers
devices
• Industry standard for decades
• Security based on elliptic curve discrete
logarithm problem
Digital Signatures
• Prove the sender's identity — confirm who sent a message
• Guarantee data integrity — detect any modifications in transit
• Provide non-repudiation — senders cannot deny signing
• Used in software distribution, legal documents, email, and communication
How Digital Signatures Work
1. Hash 2. Hash 3. Sent 4. Verified
Created Encrypted Together by Receiver
Message is passed through Sender encrypts the hash The original message and Receiver decrypts the
a hash function, producing with their private key — its digital signature are signature with the public
a unique fingerprint. this is the signature. sent to the receiver. key and compares hashes.
Matching hash = Valid Signature ✓
Cryptography Techniques Used Today
Symmetric Encryption Public-Key Encryption RSA ECC
Hash Functions Digital Signatures Hybrid Systems TLS / HTTPS
Why Today's Cryptography Works
Efficient Trusted
Optimized algorithms run seamlessly on modern Decades of academic research and real-world
hardware without noticeable delays. deployment have validated these methods.
Ubiquitous Proven
Built into browsers, apps, operating systems, Secures billions of transactions, messages, and
and cloud platforms by default. data records every single day.
Limitations of Today's Cryptography
• Current algorithms rely on problems that are hard for classical computers
• Future quantum computing power may make these problems solvable
• Data encrypted today might not stay safe over the long term
• Long-term secrets (government, medical, financial) need stronger protection
• Migration to new standards takes years — planning must start now
POST-QUANTUM
Cryptography (PQC)
• Designed to remain secure even against quantum computers
• Protects future communication with quantum-resistant algorithms
• Replaces current techniques vulnerable to quantum attacks
• NIST has already standardized the first PQC algorithms (2024)
Why PQC is Important
The Threat Store Now, Decrypt Later
• Some data must remain confidential for 10, 20, • Attackers can record encrypted data today —
or 50+ years even without a quantum computer
• Quantum computers can break RSA and ECC in • Once quantum computers mature, stored data
polynomial time can be decrypted retroactively
• Current encryption protecting sensitive data • Healthcare, financial, and government records
today may be crackable tomorrow are high-value long-term targets
• Even government secrets are at risk over the • PQC is the proactive defense against this looming
long term threat
How PQC is Different
Current Methods (RSA, ECC) Post-Quantum Cryptography
• Based on problems believed to be hard for
• Security relies on factoring or discrete
quantum computers too
logarithm problems
• Uses math from lattices, hash functions, error-
• Efficient on classical hardware
correcting codes
• Vulnerable to Shor's algorithm on quantum
• Designed for long-term security and backward
computers
compatibility
• Will need to be phased out as quantum
• Protects against both classical and future
hardware matures
quantum threats
Future Use of PQC
Secure Websites Banking Systems Messaging Apps Government Comms
Cloud Security Software Updates Long-Term Storage Digital Identity
Key Takeaways
Cryptography is the backbone of digital security — protecting everything we do online.
RSA and ECC are the foundational public-key techniques powering modern security.
Digital signatures ensure authenticity and integrity across software and communications.
Post-Quantum Cryptography is the next critical step — migration must begin now.