What Is Cryptography?

Cryptography is the science of securing information through mathematical transformation, ensuring that data can be read or verified only by authorized parties. It encompasses the design and analysis of algorithms for encryption, authentication, key exchange, and digital signatures, as well as the protocols that combine these primitives into usable security systems. Modern cryptography is a formal discipline grounded in computational complexity theory: security is defined in terms of what an adversary with bounded computational resources cannot achieve, rather than in terms of secrecy of the algorithm itself.

The field draws from number theory, abstract algebra, probability theory, and information theory. It divides broadly into symmetric cryptography, where the same key encrypts and decrypts, and asymmetric (public-key) cryptography, where a mathematically linked key pair separates the encryption and decryption operations. Secure communications, data security, message authentication, and trust management across open networks all depend on a working cryptographic foundation.

Cryptographic Primitives

Cryptographic primitives are the basic building blocks from which larger security systems are assembled. Symmetric ciphers such as AES (Advanced Encryption Standard), standardized in FIPS 197 by NIST, operate on fixed-length blocks of data using a shared secret key and provide confidentiality for stored and transmitted information. Hash functions convert arbitrary-length inputs to fixed-size digests with collision resistance and preimage resistance; they underpin message authentication codes (MACs), digital signatures, and password storage. Pseudorandom number generators and random sequence generation are critical supporting primitives: the security of virtually every cryptographic scheme depends on keys and nonces drawn from a source that is computationally indistinguishable from true randomness. Physical Unclonable Functions (PUFs) exploit manufacturing variation in hardware to generate device-specific keys that are never stored in writable memory, providing a hardware-rooted primitive for authentication.

Public-Key Cryptography and Key Management

Public-key cryptography, introduced by Diffie, Hellman, and others in the 1970s, enables two parties to establish a shared secret over an open channel without prior contact. RSA derives its security from the difficulty of factoring the product of two large primes; Elliptic Curve Cryptography (ECC) achieves comparable security at smaller key sizes using the algebraic structure of elliptic curves over finite fields. Digital signatures built on these constructions bind a message to a signer's identity in a verifiable way, underpinning certificate authorities, code signing, and email authentication. Chaotic communication systems, which use the unpredictable trajectories of nonlinear dynamical systems as encryption masks, represent a niche sub-area that exploits deterministic chaos for physical-layer security.

Post-Quantum Cryptography

Quantum computers, when they reach sufficient scale, would break RSA and ECC by running Shor's algorithm, which factors integers and solves discrete logarithms in polynomial time. This threat has prompted a global effort to standardize post-quantum cryptographic schemes that resist both quantum and classical attacks. In August 2024, NIST released its first post-quantum cryptography standards: ML-KEM (FIPS 203, based on the CRYSTALS-Kyber lattice problem), ML-DSA (FIPS 204, based on CRYSTALS-Dilithium), and SLH-DSA (FIPS 205, a stateless hash-based signature scheme). Quantum Key Distribution (QKD), a distinct approach, uses quantum-mechanical properties to distribute keys with information-theoretic security guarantees, and is the subject of active standardization by bodies including the NIST Post-Quantum Cryptography standardization program and the European Telecommunications Standards Institute.

Applications

Cryptography has applications in a range of fields, including:

• Secure internet communications via TLS/HTTPS and VPN protocols
• Blockchain and Bitcoin transaction signing and chain integrity
• Data security and storage encryption for cloud and enterprise systems
• Network security, including wireless authentication under WPA3 and IEEE 802.1X
• Identity and trust management through public key infrastructure (PKI)
• Hardware security in embedded systems via Physical Unclonable Functions