Encryption helps keep content confidential; a digital signature helps a verifier check who signed data and whether it changed. Both involve keys, but they solve different problems. When RSA and TLS appear together, distinguish an algorithm from a protocol protecting communication and from rules for handling private information.
Key terms
Encryption transforms plaintext into ciphertext. A digital signature instead supports verification of a signer's identity and the data's integrity; it does not hide the message.
| Term | Meaning |
|---|---|
OPE | Order-preserving encryption: ciphertexts retain the ordering of plaintext values, which enables some comparisons but also reveals order information. That leakage matters when assessing privacy. |
QKD | Quantum key distribution: a way for parties to establish shared secret key material using quantum communication together with an authenticated classical channel. It distributes keys; it is not the data-encryption algorithm itself. |
CAPTCHA | A challenge–response test intended to distinguish human users from automated clients, often used to reduce automated signups. It is a deterrent, not proof that every solver is human. |
DES | Data Encryption Standard, a historical symmetric block cipher with a 64-bit block and 56-bit effective key. Its security is inadequate for new encryption designs. |
digital signature | A cryptographic value produced with a signing key and checked with its corresponding verification key to support origin authentication and data integrity. It serves a different purpose from confidentiality. |
Terms to distinguish
| Term | Meaning |
|---|---|
Encryption | Transforming plaintext into ciphertext to protect the content from unauthorized reading. |
Decryption | Recovering plaintext from ciphertext with the appropriate key and algorithm. |
Private Key Encryption | In this source's terminology, symmetric-key encryption: the same secret key is used for encryption and decryption. Do not confuse that shared secret with the private key in a public-key pair. |
Public Key Encryption | Encryption using a mathematically related public and private key pair; a sender can use the public key so the holder of the private key can decrypt. |
RSA | A public-key cryptosystem named for Ron Rivest, Adi Shamir, and Leonard Adleman. Its name identifies a scheme, not an entire secure transport protocol. |
Terms in code
| Term | Meaning |
|---|---|
Confidentiality | Protecting information from disclosure to parties who are not authorized to access it. |
HTTPS | HTTP carried over TLS. With proper certificate validation and configuration, TLS provides server authentication and protects data in transit against eavesdropping and tampering. |
TLS and SSL | TLS is the current protocol family used to protect internet connections. SSL is its historical predecessor; SSLv3 is obsolete and should not be enabled. |
Reading a technical document
Encryption protects message content; a digital signature supports checks of origin and integrity. Both use cryptographic keys, but their purposes differ.
Identify the claimed security property before judging a technology name. A signed plaintext message can still be readable. An encrypted message does not automatically prove who wrote it. Likewise, a TLS connection does not decide who is authorized to view application data.
Key takeaways
Separate confidentiality, integrity, authentication, and key usage.
- OPE — Preserves order for comparisons, while exposing order information that affects privacy.
- Decryption — Uses the appropriate key and algorithm to recover plaintext from ciphertext.
- TLS and SSL — TLS protects modern connections; SSL is an obsolete predecessor, not a synonym for a current secure configuration.
