Security Beginner

What is Encryption?

The process of converting readable data into an unreadable format using algorithms, reversible only with the correct key.

Encryption protects data confidentiality. Symmetric encryption (AES, ChaCha20) uses one key for both encryption and decryption — fast but requires secure key exchange. Asymmetric encryption (RSA, ECC) uses a public/private key pair — slower but enables secure key exchange.

Data should be encrypted at rest (stored data) and in transit (network traffic via TLS). Never implement custom encryption — use established libraries and algorithms.

Learn More About This Topic

Linux System Hardening

Closely related

Network Security Fundamentals

Closely related

SOC Analyst Fundamentals

Related reading

Related Terms

Cryptographic Key Management

The practices and procedures for generating, storing, distributing, rotating, and revoking encryption keys securely.

Brute Force Attack

An attack method that systematically tries all possible combinations of passwords or keys until the correct one is found.

Two-Factor Authentication (2FA)

A security method requiring two different forms of identification before granting access to an account.

Security Headers

HTTP response headers that instruct browsers to enable security features like XSS protection, framing prevention, and content type enforcement.

Session Hijacking

An attack where an adversary takes over a legitimate user session by stealing or predicting the session identifier.

Certificate Pinning

A security technique that associates a host with its expected TLS certificate or public key, preventing man-in-the-middle attacks with fraudulent certificates.

View All Security Terms →