Plaintext
- Start with readable, meaningful data
- Recognize it as fully vulnerable
- Treat it as the exposed input
- Protect it before transmission
Encrypt
- Run an algorithm with a key
- Scramble the readable data
- Produce the protected output
- Keep the key secret
Ciphertext
- Output looks like random noise
- Useless without the correct key
- Safe to transmit or store
- Stays scrambled if intercepted
Decrypt
- Apply the correct key to reverse
- Run the algorithm in reverse
- Restore the original plaintext
- Deliver to the intended recipient
Symmetric Keys
- Use one shared key for both ends
- Move fast and efficiently
- Share the key securely
- Guard it as a single secret
Asymmetric Keys
- Pair a public and private key
- Encrypt with the public key
- Decrypt with the private key
- Keep the private key secret
Comms Security
- Protect messages, intel, and orders
- Defeat interception
- Secure field communications
- Verify the intended recipient
Beyond Comms
- Encrypt files, drives, databases
- Protect data at rest if captured
- Authenticate identity, block impersonation
- Detect tampering, ensure integrity