Kids IT Lab No.13 | Security

Intro to Encryption

The padlock icon in your browser's address bar. The "end-to-end encrypted" notice in messaging apps. The password feature on ZIP files. What all of these have in common is encryption. This article explains the two main types — symmetric-key and public-key cryptography — in a way that makes sense.

What Is Encryption?

Encryption is the technology of transforming information using a set of rules so that even if a third party intercepts it, it cannot be read. The original text is called plaintext, the transformed version is the ciphertext, and the transformation rules are the key. Ancient Rome's Julius Caesar reportedly used a cipher that shifted each letter three positions — making him one of the earliest known users of encryption, over 2,000 years ago. Modern encryption uses mathematics strong enough to resist even a supercomputer for hundreds to thousands of years.

The purpose of encryption goes beyond just keeping secrets. It also verifies that the person you are communicating with is genuine, confirms that content has not been tampered with in transit, and ensures the sender cannot later deny having sent something. Encryption operates silently and invisibly every day across the web, social media, online banking, game logins, and school cloud services.

Symmetric vs. Asymmetric Encryption

Symmetric vs. Asymmetric Encryption (with real examples) "One key or two?" is the biggest difference. The internet uses both together. Feature Symmetric (AES, etc.) Asymmetric (RSA, etc.) Number of keys Basic structure 1 (same key for both sides) Shared between sender and receiver 2 (public key + private key) Encrypt with public / decrypt with private Speed Handling large data Fast (high-speed processing) Slow (hundreds of times heavier) Safe key distribution The key delivery problem Must be shared in advance via another channel Public key can be shared openly Main use cases Best-fit scenarios File encryption, bulk data transfer Key exchange, digital signatures ▶ Caesar cipher example (earliest known symmetric cipher — shift by 3) "HELLO" → "KHOOR" (H+3=K, E+3=H, L+3=O, L+3=O, O+3=R) ▶ The modern web uses both together Asymmetric for key exchange only; symmetric for the actual data (HTTPS = TLS)
Figure 1: Symmetric vs. asymmetric encryption comparison. The Caesar cipher is a 2,000-year-old ancestor of symmetric encryption.

Symmetric-key encryption (such as AES) uses the same key to encrypt and decrypt. It is fast, but safely sharing the key with the other party is a challenge. Asymmetric (public-key) encryption (such as RSA or ECC) uses a pair of keys — anything encrypted with the public key can only be decrypted with the matching private key. This means you can send a secret message to anyone just by knowing their public key, with no need to share a secret in advance. The security of the internet depends on this mechanism.

Why HTTPS Is Safe

Encryption in Everyday Services (What Teens Use Every Day) "There's a padlock — but what's actually happening?" — explained Service Encryption used What is protected Note HTTPS websites Padlock in URL bar TLS (public-key + AES) RSA / ECDH + AES-256 Eavesdropping in transit Input data, browsing content Requires server cert LINE / WhatsApp End-to-end encrypted E2EE (device-to-device) Signal Protocol, etc. Even the server can't read it Only sender and receiver Strongest protection Password storage On the service's database Hashing (one-way) bcrypt, Argon2, etc. Passwords stay safe even if DB leaks Original password is unknown Cannot be reversed Phone lock screen PIN, fingerprint, face AES-256 storage encryption Built into hardware Protects contents if lost Photos, contacts, passwords Cannot be recovered Encrypted ZIP files 7-Zip password protection AES-256 (symmetric) Password = the key Contents of attachments Sent via email Send password separately
Figure 2: Encryption in everyday services. Teens use these every day — understanding what is happening behind the scenes improves your judgment.

HTTPS uses a hybrid approach: asymmetric encryption for the initial key exchange, then fast symmetric encryption (AES) for the actual data. This achieves both speed and secure key delivery. The padlock icon in your browser's address bar means the server's identity has been verified by a certificate issued by a trusted Certificate Authority (CA).

However, the padlock only means "this connection is encrypted." Even a fake phishing site can use HTTPS. For example, a site designed to look like your bank can display a padlock. When confirming a site is safe, check the padlock and verify the domain name is correct — and avoid clicking links in emails or social media to access sensitive sites.

Everyday Examples of Encryption

Messages in LINE are protected by end-to-end encryption (E2EE), meaning even LINE's own servers cannot read them — only the sender's and receiver's devices can decrypt them. WhatsApp and Signal work the same way. Apple's iMessage and some other messaging apps also use E2EE. You can also encrypt your entire storage drive using built-in tools (BitLocker on Windows, FileVault on Mac).

Encryption concepts also show up in password management. When a service stores your password, good security design uses hashing rather than reversible encryption — a one-way transformation. This is why a service cannot simply tell you your forgotten password: a secure system never stores the original in the first place.

Common Pitfalls

Common Misconceptions About Encryption
  • Assuming "a site with a padlock is completely safe." HTTPS encrypts the connection, but says nothing about whether the site itself is trustworthy.
  • Using old encryption algorithms (DES, MD5, etc.). Modern PCs can break these quickly. Use AES or SHA-256 and above.
  • Confusing "encryption" with "hashing" for passwords. Password storage should use irreversible hashing, not reversible encryption.

How Will This Help You in the Future?

Encryption is a foundational internet technology, so all IT engineers need at least a working understanding of it. Web engineers, security engineers, cloud engineers, and blockchain developers need deeper knowledge still. Understanding the Caesar cipher and public-key concepts as a teen makes university-level computer science and CTF (Capture The Flag) competitions much more approachable.

Take Action Today

Start with 3 steps
  1. Look at the URL bar on websites you use every day and get in the habit of confirming the padlock and "https".
  2. When sending an important ZIP file, use a tool like 7-Zip (which supports AES encryption) and set a password.
  3. Search "Caesar cipher" and "RSA encryption" online and try encrypting something by hand with pen and paper.

Summary

Encryption is the mathematical technology that secures the internet, built on two pillars: symmetric-key and asymmetric (public-key) cryptography. HTTPS combines both to achieve speed and secure key exchange. E2EE in messaging apps and storage encryption on your phone and PC are encryption technologies you already use daily. Knowing what the padlock means, and what E2EE actually does, will change how you evaluate the services you choose.

Check Encryption is for?

Related articles

PreviousWhy Do Data Leaks Happen? NextOnline Crime Methods to Watch Out For RelatedHow Does the Internet Work? RelatedWhat Is Programming, Anyway?
← Back to Security