High School BeginnerModule B12Lesson 1 of 7

B12.1 What Cryptography Does

Learn how cryptography supports confidentiality, integrity, authenticity, identity verification, trusted software, secure connections, protected storage, and safer communication.

Lesson Progress

What Cryptography Does

High School BeginnerB12: Introduction to Cryptography Concepts • Lesson 1 of 7

14% complete

Readiness Check

Before You Start

0/3 ready

Professional Hook

Cryptography Works Quietly Across the Internet

When a browser creates a secure connection, a phone protects stored data, a software publisher signs an update, or a backup is encrypted, cryptography helps protect information and establish trust behind the scenes.

Safety reminder: every key, message, file, certificate, account, website, and service in this lesson is fictional. Never share real passwords, MFA codes, recovery codes, secret keys, or private keys.

Learning Objective

Explain the defensive goals of confidentiality, integrity, authenticity, and trust.

Learning Objective

Recognize where encryption, hashing, signatures, and certificates are used.

Learning Objective

Choose the correct cryptographic goal for fictional files, messages, software, backups, and connections.

Why This Matters

Digital Trust Requires More Than Secrecy

A private message is not useful if no one can tell whether it was changed. A software file may be readable but unsafe if its publisher cannot be verified. Cryptography helps protect several connected trust goals.

Visual Diagram

What Cryptography Helps Protect

Cryptography supports several goals that often work together in secure storage, communication, websites, software, accounts, and backups.

1

Keep data private

Encryption can help prevent unauthorized people from reading protected files, messages, backups, or connections.

2

Detect changes

Hashes and signatures can help show whether a file, message, or software package has changed.

3

Verify identity

Certificates and digital signatures can help confirm the expected website, service, publisher, or sender.

4

Build trust

Cryptographic protections support secure browsing, updates, accounts, storage, and communication.

Defender rule: begin with the protection goal. Different cryptographic methods solve different problems.

Core Concept

Cryptography Solves Different Problems With Different Methods

Encryption focuses on protecting readable information. Hashing can help detect changes. Digital signatures can support integrity and authenticity. Certificates can help connect an identity with a trusted public key.

Key Vocabulary

Terms for Cryptographic Protection

Cryptography

The use of mathematical methods to help protect information, verify identity, detect changes, and support trusted communication.

Confidentiality

Keeping information available only to approved people, devices, accounts, or services.

Integrity

Protecting information from unauthorized or accidental changes and helping detect when content is different.

Authenticity

Confidence that data, a message, software, or a digital identity comes from the expected source.

Encryption

Transforming readable information into a protected form using an approved algorithm and key.

Digital signature

A cryptographic method that can help verify the origin and integrity of digital information.

Technical Breakdown

Cryptography Purpose Board

The correct cryptographic method depends on what the defender needs to protect or verify.

Confidentiality

Review question

Should unauthorized people be prevented from reading the data?

Safer choice

Use approved encryption with protected keys and appropriate access controls.

Integrity

Review question

Do users need to detect whether the data or file has changed?

Safer choice

Use trusted hashing, signatures, version controls, or verification tools.

Authenticity

Review question

Do users need confidence about the expected sender, publisher, website, or service?

Safer choice

Verify trusted certificates, signatures, official accounts, and expected identities.

Trust

Review question

Which other protections must support the cryptographic method?

Safer choice

Combine cryptography with access controls, updates, backups, monitoring, and safe user decisions.

Fake Dashboard

Cryptographic Goal Review Panel

This fictional panel compares confidentiality, integrity, authenticity, identity, and trust decisions.

Fake Data

Private school file

Readable by anyone who opens the storage folder

Use approved encryption and limit access to authorized users.

Software download

Publisher provides a trusted hash or signature

Verify integrity and source before using the file.

Secure website

Browser shows a valid trusted HTTPS connection

Confirm the expected site name and review any browser warnings.

Signed document

Recipient needs confidence about origin and changes

Use an approved digital-signature process and verify it through trusted software.

Protected backup

Backup contains private records and account data

Use encryption, limited access, trusted storage, and recovery planning.

Fake Dashboard

Fake Cryptography Goals Dashboard

Training dashboard using fictional files, messages, software, websites, certificates, signatures, hashes, and encryption evidence.

Scenarios reviewed

18

Fictional storage, messaging, software, website, account, and backup situations.

Protection goals

31

Several scenarios required confidentiality, integrity, and authenticity together.

Correct defensive matches

15

Cryptographic methods were matched to the protection need.

Fake SOC Alert

Downloaded File Fails Integrity Verification

Source: Fake Software Verification Training • Time: 1:42 PM

High Severity
A fictional software file has a different cryptographic hash than the value published through the official trusted source.
Defensive recommendation: Do not open or install the file. Preserve the evidence, verify the official source, obtain a trusted copy, and report the mismatch.

Fake Log Panel

Fake Cryptography Goal Review Log

training-log-viewer.log
13:18:07 FILE name='approved_update.pkg' source='official_publisher'
13:22:14 CONFIDENTIALITY requirement='low' public_download='expected'
13:27:33 INTEGRITY expected_hash='publisher_value' actual_hash='different'
13:31:49 AUTHENTICITY signature_status='unverified'
13:36:02 ACTION execution='blocked' source='rechecked'
13:42:18 RESPONSE trusted_copy='requested' report='submitted'

Training note: this is fake data for defensive analysis practice only.

Analyze the Evidence

Which Cryptographic Goals Are Needed?

A fictional backup contains private school and family records.
The owner needs to detect whether the backup changes.
Only approved users should be able to restore it.
Recovery staff need confidence that the backup is authentic.

What is the safest conclusion?

Common Mistakes

Mistakes That Weaken Cryptographic Protection

Assuming encryption automatically proves who created the data.
Treating hashing and encryption as the same process.
Sharing secret or private keys through untrusted messages.
Ignoring certificate or signature warnings because a page or file looks familiar.
Using unofficial cryptographic tools for sensitive information without approval.
Believing cryptography replaces strong accounts, updates, backups, and safe user decisions.

Safe Defensive Lab

Match Fictional Scenarios With Cryptographic Goals

Fake Scenario Set

Cryptography Goal Review

A fictional student reviews a private message, protected backup, signed document, software download, secure website, cloud file, and account-recovery process.

Defender Review Steps

  • Identify the data, owner, users, and purpose.
  • Choose confidentiality, integrity, authenticity, or several goals.
  • Match the goal with encryption, hashing, signatures, or certificates.
  • Identify which keys or trust relationships must be protected.
  • Choose an approved verification step.
  • Record which noncryptographic controls are also required.

Scenario Decision Lab

A Private Backup Is Stored as Readable Data

A fictional backup contains private student and family records but can be opened by anyone who reaches the storage folder.

Scenario Decision Lab

A Software File Has a Different Hash

A fictional downloaded software file does not match the trusted hash published by the official source.

Defender Habits

What Cryptography Does Checklist

Check Your Understanding

B12.1 Mini Quiz: What Cryptography Does

Choose your answers first. Explanations appear only after submission.

1. What is one main purpose of cryptography?

2. Which goal focuses on keeping information private?

3. Which goal focuses on detecting unauthorized changes?

4. What can authenticity help verify?

5. Does cryptography replace all other security practices?

Portfolio Prompt

Portfolio Prompt

Create a one-page fictional cryptography goal map. Include seven scenarios, data owner, protection goal, cryptographic method, key or trust requirement, verification step, and additional noncryptographic controls.

Use fictional messages, files, keys, certificates, accounts, websites, services, and organizations only.
Do not include real passwords, private keys, secret keys, MFA codes, recovery codes, or personal data.
Explain why each method matches the protection goal.

Key Takeaways

What You Should Remember

1.Cryptography helps protect confidentiality, integrity, authenticity, and digital trust.
2.Encryption, hashing, signatures, and certificates solve different defensive problems.
3.Secret and private keys must remain protected.
4.Warnings and failed verification should not be ignored.
5.Cryptography works best as one layer within a larger security plan.

Navigation

Continue Module B12