Secret Codes: How Encryption Keeps Data Safe

Look at this message: KHOOR ZRUOG. It looks like nonsense — but it is actually the phrase 'HELLO WORLD' disguised using a simple rule. Every letter has been shifted three places forward in the alphabet. H becomes K, E becomes H, and so on. People have been hiding messages like this for thousands of years. Julius Caesar used a trick just like this to send secret orders to his generals. Today, your bank, your email app, and almost every website on the planet use a far more powerful version of the same big idea: encryption. So — what exactly is encryption, and how does it work?

Encryption is the process of scrambling data so that only someone with the correct key can read it. The original, readable message is called plaintext. After encryption, the scrambled version is called ciphertext. To turn ciphertext back into plaintext, you need to decrypt it, which requires a key — a piece of secret information that tells you the rule used to scramble the data. The simplest type of cipher is a substitution cipher, where each letter is replaced by a different letter or symbol. The Caesar cipher is a famous example: you shift every letter in the alphabet by a fixed number of positions. A shift of 3 turns A into D, B into E, C into F, and so on. When the alphabet wraps around, X becomes A, Y becomes B, Z becomes C. Modern encryption works on the same principle but is vastly more complex. Algorithms — step-by-step mathematical rules — scramble data using keys that are enormous numbers (often 128 or 256 binary digits long). One widely used standard is AES (Advanced Encryption Standard), which banks, governments, and apps rely on to protect billions of messages every second. There are two main types of modern encryption: • Symmetric encryption uses the same key to encrypt and decrypt. It is fast, but both sender and receiver must share the secret key safely. • Asymmetric encryption uses a pair of keys: a public key (shared openly) to encrypt, and a private key (kept secret) to decrypt. This solves the problem of how to share the key safely in the first place. HTTPS — the secure version of websites — uses asymmetric encryption during the initial handshake before switching to a faster symmetric key for the rest of the session. Without encryption, any data travelling across a network could be intercepted and read by attackers. Encryption makes intercepted data useless without the correct key.