What Is Cryptography?

The art of secret writing

The word cryptography comes from the Greek: kryptos (hidden) + graphein (to write). Literally — hidden writing.

At its core, cryptography is the practice of transforming information so that only the intended recipient can understand it. Everyone else sees noise.

But cryptography is more than encryption. It covers a broader set of problems:

Confidentiality — keeping messages private
Integrity — ensuring a message hasn't been tampered with
Authentication — proving who sent a message
Non-repudiation — preventing someone from denying they sent it

What cryptography is not

Hiding the algorithm doesn't make a system secure, because a good cryptographic system is secure even when the algorithm is fully public. Only the key is secret.

This principle was formalized by Auguste Kerckhoffs in 1883: "A cryptosystem should be secure even if everything about the system, except the key, is public knowledge."

Modern cryptography follows this religiously. AES, RSA, SHA-256 — all fully published. Security comes from the math, not secrecy of the method.

💡

Kerckhoffs's principle is why open-source cryptography is trusted more than proprietary "black box" systems. If the algorithm can be inspected and attacked by the world's best cryptographers and survives — that's real security.

The two parties (and the adversary)

Every cryptographic scenario has the same cast:

Alice wants to send a message to Bob.

Eve (the eavesdropper) is listening on the channel between them.

The goal: Alice and Bob can communicate meaningfully. Eve cannot learn anything useful.

As cryptographic systems evolved, so did the adversary. Modern cryptography assumes Eve is computationally bounded — she has enormous computing power but not infinite. Security means: even with all that power, breaking the system would take longer than the age of the universe.

Cryptography vs. cryptanalysis

Cryptography is the construction of secure systems.

Cryptanalysis is the breaking of them.

Together they form cryptology. The two fields advance in lockstep — every new cipher is tested against the best known attacks, and every successful attack drives the design of stronger ciphers.

This back-and-forth has been going on for thousands of years, and it's still happening today in academic journals and government research labs.