Cryptographic goals

Choose the security property

Separate confidentiality, integrity, authenticity, and non-repudiation before selecting a cryptographic operation.

8 minute lesson

~~~

Cryptography solves specific problems. Start by naming the property you need.

Confidentiality hides content. Integrity detects change. Authenticity helps prove who created or approved a message. Some designs need several properties together, and the surrounding system still needs authorization and key management.

A payroll file is encrypted before upload, but nobody verifies who created it. Its contents stay private while an attacker replaces it with different encrypted bytes.

Confidentiality, integrity, and authenticity answer different questions. Availability and authorization sit outside the cryptographic primitive, so name those needs separately.

Write the required properties for a private note, software installer, session cookie, and payroll upload. For each answer, name the attacker and the evidence that the control produces. Then change one case so confidentiality is unnecessary but authenticity remains essential, and explain the different choice.

Lesson completed

Take this course offline

Get every free book and course as PDF and EPUB files.

Get the download library →