Encryption
Designed to be reversible for an authorized reader with the right key.
Changing readable data into protected data so that only an intended reader can understand it.
Encryption transforms readable data, called plaintext, into a protected form called ciphertext.
Encryption protects information by making it unreadable without the right key.
Think of putting a message inside a locked box before sending it.
Anyone holding the original message can read it.
The message is transformed into protected ciphertext.
The intended reader uses a key to recover the message.
Encryption helps protect the confidentiality of data while it is stored or moving between systems.
Unreadable ciphertext hides the original meaning from unintended readers.
A key controls how data is encrypted and how an authorized reader decrypts it.
Secure systems can exchange sensitive information with less risk of exposure.
Encryption is used wherever sensitive information needs protection.
HTTPS encrypts data sent between a browser and a server.
Databases, backups, and files can be encrypted at rest.
Messages can be encrypted while they travel between participants.
Payment details are protected during transmission and storage.
Secrets and tokens can be protected when systems exchange them.
Phones and computers can encrypt local storage if a device is lost.
A client sends a password reset token to a server over an encrypted HTTPS connection.
reset_token=7f3a...&user=42The network carries ciphertext. The authorized endpoint decrypts it before processing.
Encryption protects the data; the key and the access controls determine who can recover it.
Designed to be reversible for an authorized reader with the right key.
Produces a one-way digest used for comparison, integrity checks, or password verification.
Encryption is for protected recovery. Hashing is for one-way comparison.
| ENGLISH TERM | 中文 | SIMPLE ENGLISH | 中文小白理解 |
|---|---|---|---|
| Encryption | 加密 | Turning readable data into protected data. | 把可读数据转换成受保护的数据。 |
| Decryption | 解密 | Turning protected data back into readable data. | 把受保护的数据还原成可读数据。 |
| Plaintext | 明文 | Data in its readable form before encryption. | 加密前人能够直接读懂的数据。 |
| Ciphertext | 密文 | Protected data produced by encryption. | 加密后看起来无法直接理解的数据。 |
| Key | 密钥 | A value used to encrypt or decrypt data. | 用来加密或解密数据的一段关键值。 |
| Symmetric Encryption | 对称加密 | Encryption that uses the same key to encrypt and decrypt. | 加密和解密使用同一把密钥的方式。 |
| Asymmetric Encryption | 非对称加密 | Encryption that uses a public key and a private key. | 使用公钥和私钥的一对密钥进行保护的方式。 |
| Encryption at Rest | 静态数据加密 | Encryption that protects stored data. | 保护数据库、文件或备份等已存储数据的加密。 |
| Encryption in Transit | 传输中加密 | Encryption that protects data while it moves between systems. | 保护数据在系统之间传输过程的加密。 |
Encryption turns readable data into protected ciphertext.
The right key is needed to decrypt the data.
Encryption protects confidentiality, but it does not replace authentication or authorization.