Cryptography isn't just about scrambling messages. It's a system for building trust in a digital world where you can't always see who you're talking to. This trust rests on four fundamental goals: confidentiality, integrity, authenticity, and non-repudiation. Think of them as the promises cryptography makes to keep our digital interactions secure and reliable.

Confidentiality is the most familiar goal. It ensures that information is accessible only to authorised individuals. If a message is intercepted, it should be unreadable to the eavesdropper. It's the digital equivalent of a sealed envelope.

This is crucial for everything from personal emails and online banking to classified government documents. Without confidentiality, any data sent over a network would be an open book. Cryptography achieves this primarily through encryption, which transforms readable plaintext into indecipherable ciphertext using a key.

Integrity guarantees that data has not been altered or tampered with in transit. It confirms that the message received is the exact same message that was sent. Imagine a bank transfer for £100. Integrity ensures an attacker can't intercept it and change the amount to £10,000.

This is accomplished using techniques like cryptographic hashes, which generate a unique, fixed-size string of characters from the data. This string, called a hash or message digest, acts like a digital fingerprint. If even a single character in the original data changes, the resulting hash will be completely different, immediately revealing that tampering has occurred.

While related, these two goals serve distinct purposes. Authenticity is about verifying the origin of a message. It answers the question, "Is this message really from the person it claims to be from?" This prevents attackers from impersonating others, which is the basis of many phishing scams.

Non-repudiation goes a step further. It provides undeniable proof that the sender really did send the message. The sender cannot later deny their action. This is the digital equivalent of a legally binding signature on a contract. It's essential for high-stakes transactions, legal agreements, and ensuring accountability.

Both authenticity and non-repudiation are often achieved using digital signatures, which bind a person's identity to a piece of digital information. By applying a digital signature using their private key, a sender creates a mark that can only be verified using their corresponding public key, proving both origin and intent.

Together, these four goals form the bedrock of modern cybersecurity. By understanding what each one promises, you can better appreciate how specific cryptographic tools are used to build the secure digital systems we rely on every day.

Time to check your understanding of these foundational principles.

Understanding these four pillars is the first step to mastering how cryptography secures our world.