Wednesday 11 April 2007

Why data encryption preserves confidentiality but not integrity and availability?

Encryption provides a means of preventing an unauthorised party from reading our data (hence confidentiality of data can be maintained).
It does not do anything to ensure that the data is correct (integrity) or that it can be obtained when needed (availability).
Secrecy: only sender, intended receiver should “understand” message contents sender encrypts message receiver decrypts message.
Authentication: sender, receiver want to confirm identity of each other
Message Integrity: sender, receiver want to ensure message not altered (in transit, or afterwards) without detection.

1 comment:

Natalia said...

Thank you for clearing this point. I never thought about this point but reading this article made to think for a while. I read so many articles about encryption but no one has discussed this point.
digital signatures