Simple mental model
Cryptography evolved from hiding letters to building mathematical trust for the internet, devices, identity, signatures, and a future where quantum computers may change the assumptions.
Big idea
How do we protect information, prove identity, and trust messages when an attacker can watch, copy, modify, or replay what we send? The tools changed over time, but the goal stayed familiar: keep secrets private, prove who sent something, and detect tampering.
Character substitution
Early ciphers shifted or swapped letters. A simple example is replacing A with D, B with E, and so on. The mental model was: if the attacker does not know the substitution rule, the message stays hidden.
Weakness: language patterns leak clues.
Mechanical and rotor ciphers
Instead of one fixed mapping, mechanical systems changed the mapping as the message progressed. This made pattern analysis harder and moved crypto toward repeatable machines and keys.
Mental shift: the machine and key become part of the security.
Prime factorization
Multiplying large primes is easy for computers. Factoring the result back into those primes is hard at useful sizes. This idea helped unlock public-key cryptography, where people can share public information without sharing the secret key.
Mental shift: security can come from computational hardness.
DES
DES showed the value of a public, standardized encryption algorithm. Both sides used the same secret key to encrypt and decrypt. It was important historically, but its small key size became too weak as computing power grew.
Weakness: short keys eventually become brute-forceable.
AES
AES replaced DES for modern systems. It is efficient in software and hardware, supports larger key sizes, and became a foundation for protecting storage, network traffic, devices, and cloud systems.
Mental model: use symmetric crypto for bulk data protection.
Asymmetric cryptography
Asymmetric crypto lets one key be public while the matching private key stays secret. This made secure key exchange, digital signatures, certificates, and internet-scale trust practical.
Mental model: public keys help strangers establish trust.
ECDSA
Elliptic curve cryptography gives strong security with smaller keys than older public-key systems. ECDSA became widely used for signing software, authenticating systems, and proving that a message came from the holder of a private key.
Mental model: signatures prove authorship and integrity.
Post-quantum cryptography
Large quantum computers could break some widely used public-key assumptions, including factoring and elliptic-curve discrete logarithms. PQC uses different hard problems designed to resist known quantum attacks.
Mental model: preserve trust before the old assumptions fail.
One-line summary
Crypto started as hiding messages. It became a system for encrypting data, proving identity, signing software, protecting devices, and preparing for a post-quantum future.