What Is Decryption?

Decryption is the process of transforming ciphertext, an encoded and unreadable form of data, back into plaintext using a cryptographic key and algorithm. It is the inverse operation of encryption: where encryption applies a mathematical function with a key to obscure data, decryption applies the inverse function with the appropriate key to recover the original content. Together, encryption and decryption form the core operation of symmetric and asymmetric cryptographic systems that protect data confidentiality in storage and transmission.

The field sits within cryptography, itself a branch of mathematics and computer science concerned with secure communication in the presence of adversaries. Modern cryptographic systems are evaluated against rigorous security definitions, where decryption is considered secure if it is computationally infeasible for an adversary without the correct key to recover plaintext. The NIST Computer Security Resource Center provides authoritative definitions distinguishing symmetric from asymmetric cryptographic systems, which differ fundamentally in how keys are used for decryption.

Symmetric Decryption

In symmetric cryptography, encryption and decryption use the same secret key. The key must remain confidential and be shared between communicating parties before any exchange occurs. The Advanced Encryption Standard (AES), standardized by NIST in 2001 and specified in FIPS 197, is the dominant symmetric cipher in use today. AES operates on 128-bit data blocks with key lengths of 128, 192, or 256 bits, applying a sequence of substitution, permutation, and mixing operations in multiple rounds. Decryption applies the inverse of each operation in reverse order, recovering the plaintext from the ciphertext given the same key. AES in Galois/Counter Mode (AES-GCM), standardized in NIST SP 800-38D, combines decryption with authentication, verifying that ciphertext has not been tampered with before delivering plaintext.

Stream ciphers, an alternative symmetric form, generate a pseudorandom keystream that is XOR-combined with plaintext during encryption; decryption repeats the same XOR with the same keystream. ChaCha20, specified in RFC 7539 by the Internet Engineering Task Force, is a widely deployed stream cipher favored for its software performance and resistance to timing attacks.

Asymmetric Decryption

Asymmetric cryptography uses a mathematically linked key pair: a public key for encryption and a private key for decryption. Any party may encrypt a message using the recipient's public key, but only the holder of the corresponding private key can decrypt it. RSA, the most widely studied asymmetric cryptosystem, bases security on the computational difficulty of factoring large integers. RSA decryption computes the modular exponentiation of ciphertext to the private exponent. The NIST glossary of asymmetric cryptography describes how key pair generation, encryption, and decryption relate in both RSA and elliptic-curve Diffie-Hellman systems.

Post-quantum cryptography is reshaping the asymmetric landscape because Shor's algorithm, executable on a sufficiently large quantum computer, would break both RSA and elliptic-curve systems by solving the underlying mathematical problems efficiently. NIST's Post-Quantum Cryptography standardization process selected CRYSTALS-Kyber for key encapsulation (and thus decryption) in 2022, based on the hardness of the module-lattice learning-with-errors problem rather than integer factorization.

Key Management and Security

Decryption security depends entirely on the secrecy and integrity of the decryption key. Key management encompasses key generation using cryptographically secure random number generators, distribution through authenticated channels, storage in hardware security modules (HSMs) or trusted platform modules (TPMs), and scheduled rotation. The NIST Special Publication 800-57 on key management defines a key lifecycle covering generation through destruction and specifies approved algorithms and key lengths for each security strength level.

Applications

Decryption has applications in a wide range of fields, including:

• Secure web communications via TLS and HTTPS
• Encrypted file storage and full-disk encryption on endpoints
• Digital rights management in media distribution systems
• End-to-end encrypted messaging and email
• Authentication protocols relying on asymmetric signature verification