Encryption in plain language

In this lesson you'll

• Explain the difference between symmetric and public-key encryption
• Identify where public-key cryptography protects everyday work
• Explain which kinds of encryption quantum computers threaten most

Encryption in one minute

Cryptography is the science of protecting information with math. It does three jobs you rely on every day:

• Confidentiality: only the right people can read data (encryption)
• Integrity: nobody changed the data without it being noticed
• Authenticity: you know who sent it (digital signatures)

There are two main families.

Symmetric encryption

The same secret key locks and unlocks the data. It's fast and used for bulk data, such as encrypted hard drives and the content of a secure web session. The best-known example is AES.

The problem: both sides need the same secret key. How do you share it safely with a website you've never visited?

Public-key (asymmetric) cryptography

Each party has a key pair: a public key that can be shared with anyone and a private key that's kept secret. Public-key methods solve two problems:

• Key establishment: two parties agree on a shared secret key over the internet, even if someone is listening
• Digital signatures: proving that a document, software update or website really came from who it says

Common public-key methods include RSA and elliptic curve cryptography (ECC), such as ECDH for key establishment and ECDSA for signatures.

Where public-key cryptography shows up at work

What quantum computers threaten

A large, error-corrected quantum computer running Shor's algorithm could efficiently solve the math problems that RSA and ECC depend on. That would break public-key key establishment and signatures: an attacker could read recorded traffic or forge signatures.

Symmetric encryption is in much better shape. A different quantum method (Grover's algorithm) gives only a limited speedup against it. NIST considers approved symmetric algorithms such as AES significantly less vulnerable and doesn't expect to replace them as part of this transition.

So the job is mainly to replace public-key cryptography, which is used almost everywhere.

Workplace example: a hospital's IT team

A hospital's security analyst maps where public-key cryptography is used: the patient portal's website certificate, the VPN for remote clinicians, signed software updates for infusion pumps and the medical records system's connections to insurers. She realizes that "replacing encryption" isn't one project; it touches dozens of systems and vendors.

Try it

List five systems or services your team uses every day. For each, note whether it likely depends on public-key cryptography (web connections, VPN, signed updates, certificates, sign-in). Then ask an approved AI tool:

In plain language for a non-technical manager, under 200 words, explain the
difference between symmetric encryption and public-key cryptography, and which one
a large quantum computer would threaten most. Use one everyday analogy.

Check that the answer says public-key cryptography (like RSA and ECC) is the main concern, and symmetric encryption like AES is much less affected.

Key takeaways

• Symmetric encryption (like AES) uses one shared key; public-key cryptography (like RSA and ECC) uses key pairs for key establishment and signatures.
• Public-key cryptography protects web connections, VPNs, signed updates, sign-in, payments and devices.
• Large quantum computers running Shor's algorithm would break RSA and ECC.
• Symmetric algorithms like AES are much less vulnerable; the migration is mainly about public-key cryptography.

Sources

• NIST, What Is Post-Quantum Cryptography? (opens in a new tab)