Cryptography Essentials for Security Practitioners
What cryptography does
Core uses
Cryptography protects data in transit and at rest, confirms message integrity, and supports authentication and non-repudiation. Security controls are strongest when cryptography is used correctly and with good key management.
Common cryptographic primitives
| Primitive | Main purpose |
|---|---|
| Symmetric encryption | Fast secrecy using one shared key |
| Asymmetric encryption | Key exchange and public-key secrecy |
| Hashing | Fixed-length fingerprint for integrity |
| Digital signature | Integrity, authenticity, and non-repudiation |
Important distinction
Encryption hides content, but it does not automatically prove who sent it. Signatures and authenticated protocols are needed for that.
Key terms
When to choose what
-
1
Use hashing when you need integrity checking, not secrecy.
-
2
Use symmetric encryption for large data volumes.
-
3
Use asymmetric cryptography for identity, exchange, and signatures.
-
4
Use well-reviewed protocols instead of combining algorithms manually.
What is the main purpose of hashing?
Hashes are used to detect change and verify integrity.
Correct answer: Provide a fingerprint for integrity checking
What is a digital signature used to prove?
A signature binds integrity to the signer’s private key.
Correct answer: That a message came from the holder of the signing key and was not altered
Which is the best reason to prefer authenticated encryption modes and protocols?
Authenticated encryption helps prevent tampering and provides secrecy together.
Correct answer: They combine confidentiality with integrity protection
Why is key management critical?
Security often fails at the operational handling of keys rather than at the math.
Correct answer: Because strong algorithms are ineffective if keys are exposed, reused badly, or stored insecurely