What Is Integrity?

Integrity, in information technology and systems engineering, is the property that data, software, or a system remains accurate, consistent, and unaltered except through authorized operations. An integrity guarantee means that any unauthorized modification, whether caused by hardware faults, transmission errors, or deliberate tampering, can be detected and, in some architectures, corrected or rejected. Integrity is one of the three foundational properties of information security alongside confidentiality and availability, and its scope extends from individual bytes in a network packet to entire software supply chains and safety-critical physical systems.

The concept applies at multiple levels and draws on error detection theory, cryptography, and formal verification methods. At the communications layer, integrity is provided by checksums and cyclic redundancy codes that detect accidental corruption. At the security layer, cryptographic mechanisms provide integrity assurances that hold even against adversaries who can observe and manipulate the channel. At the systems engineering layer, integrity encompasses the assurance that software executes the intended function and has not been modified between build time and deployment, a property of particular importance in safety-critical and defense applications.

Data Integrity and Error Detection

Data integrity in storage and transmission is maintained through codes that append a function of the data to the payload, allowing receivers to verify that the received value matches the original. Cyclic redundancy check (CRC) algorithms, including CRC-32 specified in IEEE 802.3 Ethernet and ISO 3309, detect burst errors in transmitted frames by computing a polynomial remainder over the data bits. Error-correcting codes such as Reed-Solomon and Hamming codes go further, providing the redundancy needed to identify and repair specific bit errors without retransmission. In database systems, the ACID property of atomicity, consistency, isolation, and durability enforces integrity at the transaction level, ensuring that a crash or concurrent modification cannot leave the database in a partially updated state. NIST's discussion of data integrity in the context of AI system security illustrates how the scope of data integrity has expanded to include the training data and model parameters on which machine learning systems depend.

Cryptographic Integrity Mechanisms

Cryptographic hash functions map data of arbitrary length to a fixed-length digest in a way that makes it computationally infeasible to find two inputs with the same digest or to reverse the mapping. SHA-256 and SHA-3, standardized by NIST in FIPS 180-4 and FIPS 202 respectively, are used to verify software distribution packages, protect certificate integrity in TLS connections, and anchor blockchain ledger entries. Message authentication codes (MACs), constructed by combining a hash function with a secret key, provide integrity with authentication: only a party knowing the key can produce a valid MAC, so an altered message or forged code is detectable. International standards for data integrity mechanisms, including ISO/IEC 9797 on MACs and ISO's overview of cryptographic standards, define the algorithm suites and key management practices that support interoperable integrity verification.

System and Software Integrity

Software integrity encompasses verifying that executables and configuration data have not been modified after release. Secure boot mechanisms in embedded systems and modern personal computers use a chain of cryptographic signature verification, starting from a hardware root of trust, to confirm that each stage of the boot process loads only authorized code. Code signing infrastructure, including the X.509 certificate hierarchy and the Authenticode model used in Windows environments, extends this to application software. An IEEE Xplore paper on data integrity algorithms implemented in a cryptographic coprocessor demonstrates hardware acceleration approaches for integrity verification in resource-constrained embedded systems.

Applications

Integrity has applications in a wide range of disciplines, including:

• Software supply chain verification in continuous integration and deployment pipelines
• Digital forensics and tamper-evident logging for legal and regulatory compliance
• Safety-critical embedded systems in avionics, medical devices, and automotive control units
• Blockchain and distributed ledger technologies relying on cryptographic hash chaining
• Database replication and distributed storage systems requiring consistent state across nodes