Cryptography terms
The mathematics keeping secrets in an adversarial world
Cryptography is the foundation of secure communication, authentication, and data integrity across the internet. This category covers symmetric and asymmetric encryption, hashing, digital signatures, TLS, key exchange protocols, and the common mistakes developers make when implementing or misapplying cryptographic primitives. Use libraries — but understand what they are doing.
More on Cryptography
History
Cryptography evolved from ancient manual ciphers like Caesar's cipher into a rigorous mathematical discipline following Claude Shannon's 1949 information theory work, which established the theoretical foundations for secure communication. The field underwent a paradigm shift in the 1970s with the introduction of public-key cryptography (Diffie–Hellman, RSA) and digital signatures, moving beyond symmetric-key systems that required secure key distribution. The 1980s and 1990s saw standardization efforts (DES, then AES) and widespread adoption in commercial systems, while SSL/TLS emerged as the internet's primary security protocol. Modern cryptographic practice has become central to software development, addressing new challenges including quantum computing threats, forward secrecy in ephemeral sessions, and cryptographic agility in APIs. Today, developers rely on vetted libraries and standards rather than implementing cryptography from scratch, reflecting the maturation of both the field and recognition that secure-by-default practices require specialist infrastructure and continuous security auditing.
Key concepts
- Cryptographic Hash Functions
- Symmetric Encryption
- Asymmetric Encryption
- Public Key Infrastructure (PKI)
- Digital Signatures
- Encryption in Transit
- Encryption at Rest
- TLS Certificate Lifecycle
Best references
-
NIST Special Publication 800-175B: Guideline for Using Cryptographic Standards in the Federal Government – Cryptographic Mechanisms Authoritative U.S. government guidance on approved cryptographic algorithms and their proper application across all 17 terms in this category.
-
RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2 IETF standard specification covering encryption in transit, digital signatures, key derivation, and certificate lifecycle fundamentals.
-
RFC 6234: US Secure Hash and HMAC Algorithms Definitive technical reference for cryptographic hash function standards (SHA-1, SHA-2, SHA-3) and HMAC implementation.
-
OWASP Cryptographic Storage Cheat Sheet Practical guidance on encryption at rest, symmetric/asymmetric encryption selection, and common cryptographic implementation mistakes.
-
RFC 3394: Advanced Encryption Standard (AES) Key Wrap Algorithm Standard specification for key wrapping and secure key derivation, central to encryption at rest and PKI practices.
-
"Cryptography Engineering" by Schneier, Ferguson, and Kohno (2010) Seminal industry reference covering threat modeling, algorithm selection, and real-world cryptographic system design across all category topics.
✦ Latest in Cryptography
Typed relationships here
Edges touching a Cryptography term.
- PHP Sodium Extension (Libsodium) Realizes Asymmetric Encryption 1d
- PHP Sodium Extension (Libsodium) Realizes Symmetric Encryption 2d
- Cryptography Common Mistakes Contains Timing Attacks Jun 15
- Digital Signatures Often seen in Authentication Jun 5
- Post-Quantum Cryptography Often seen in Encryption in Transit Jun 4
🤖 AI Guestbook — Cryptography educational data only
|
|
Last 30 days
Agents 0
No pings yet today
PetalBot 4Sogou 2
Amazonbot 193Scrapy 140Perplexity 104Google 71Ahrefs 69SEMrush 63Unknown AI 37Claude 28ChatGPT 27Bing 20PetalBot 19Meta AI 16Majestic 11Sogou 6Qwen 1Common Crawl 1
Most referenced — Cryptography
No pings yet today
How they use it
crawler 745
crawler_json 57
pre-tracking 4
Category total806 pings
Terms pinged17 / 17
Distinct agents15
Forward Secrecy
PHP 7.4+
A key-exchange property where ephemeral session keys are discarded after use, so a future compromise of long-term keys cannot decrypt past sessions.
CWE-327 OWASP A02:2021-Cryptographic Failures
3w ago
Cryptography advanced
5.9
OAuth 2.0 PKCE — Proof Key for Code Exchange
PHP 7.0+ An OAuth 2.0 extension that prevents authorisation code interception attacks in public clients (SPAs, mobile apps) by binding each authorisation request to a cryptographic secret the client generates.
3mo ago
Cryptography intermediate
TLS Certificate Lifecycle
The end-to-end process of generating, validating, issuing, deploying, monitoring, and renewing a TLS certificate — and what breaks at each stage when it goes wrong.
3mo ago
Cryptography intermediate
Block Cipher Modes
PHP 7.1+
How a block cipher (AES) processes data larger than one block — ECB is insecure, CBC requires a MAC, GCM provides authenticated encryption and is the correct choice.
3mo ago
Cryptography advanced
Certificate Transparency Logs
1
Public append-only logs of all issued TLS certificates — enabling detection of misissuance and rogue certificates within hours rather than months.
3mo ago
Cryptography advanced
Cryptographic Hash Functions
PHP 5.1+
1
One-way functions producing a fixed-length digest — SHA-256, SHA-3, and BLAKE3 are secure for data integrity; MD5 and SHA-1 are broken and must not be used for security.
3mo ago
Cryptography intermediate
Cryptography Common Mistakes
PHP 7.1+
1
IV reuse, ECB mode, rolling your own crypto, timing vulnerabilities, and SHA-256 for passwords — the most frequent implementation errors.
3mo ago
Cryptography intermediate
Encryption in Transit
1
Encrypting data moving between systems using TLS — protecting against interception, tampering, and man-in-the-middle attacks on all network communication.
3mo ago
Cryptography intermediate
Post-Quantum Cryptography
3
CRYSTALS-Kyber (ML-KEM) and CRYSTALS-Dilithium (ML-DSA) standardised by NIST in 2024 — designed to resist attacks from quantum computers.
3mo ago
Cryptography advanced
Secret Sharing — Shamir's Scheme
Splitting a secret into N shares where any K can reconstruct it — preventing single points of failure for root encryption keys and disaster recovery credentials.
3mo ago
Cryptography advanced
Asymmetric Encryption
PHP 5.0+
2
A cryptographic system with a public key (shared freely) and a private key (kept secret) — data encrypted with the public key can only be decrypted with the private key.
3mo ago
Cryptography advanced
Digital Signatures
PHP 5.0+
6
Cryptographic proof that data was created by the holder of a private key and has not been altered — providing authentication, integrity, and non-repudiation.
3mo ago
Cryptography advanced
Encryption at Rest
PHP 7.0+ Encrypting stored data so that physical access to storage media does not expose plaintext — protecting against data theft from stolen drives, decommissioned hardware, and storage breaches.
3mo ago
Cryptography advanced
JWT Deep Dive
PHP 7.0+
JSON Web Tokens carry signed (or encrypted) claims — three Base64url-encoded sections: header.payload.signature. Security depends entirely on algorithm choice and verification correctness.
3mo ago
Cryptography advanced
Key Derivation Functions
PHP 5.5+
KDFs (PBKDF2, bcrypt, scrypt, Argon2) derive a cryptographic key from a password by being intentionally slow — making brute-force attacks computationally infeasible.
3mo ago
Cryptography advanced
Public Key Infrastructure (PKI)
1
The system of certificate authorities, certificates, and protocols that establishes trust in public keys — enabling HTTPS, code signing, and email encryption at internet scale.
3mo ago
Cryptography advanced
Symmetric Encryption
PHP 7.2+
1
Encryption where the same key encrypts and decrypts data — fast and suitable for bulk data, but key distribution is the primary challenge.
3mo ago
Cryptography advanced