← Back to Vault
🔒

Vault 101

Encryption and certificates explained

🔐 Secret Messages

Encryption scrambles data so only the intended recipient can read it. Your browser does this every time you send a password or credit card number.

💬
Before Encryption

password123

→
🔒
After Encryption

a7xK9mQ2...

🔑 Keys Make It Work

Encryption uses keys — long numbers that lock and unlock data. There are two kinds:

  • 🔓Public key — Anyone can use this to lock a message.
  • 🔒Private key — Only the owner has this. It unlocks the message.
✅ You already use encryption every day. Every time you see the padlock in your browser, your connection is encrypted.

📄 A Digital ID Card

A certificate proves a website's identity, like an ID card. It binds a domain name to a public key so your browser knows who it's talking to.

💡 Everyday example
You go to your bank's website. Your browser asks: "Prove you are really this bank." The bank shows its certificate. Your browser checks it and shows the padlock.

✍️ Signatures Prove It Is Real

A digital signature stamps each certificate to prove two things:

  • ✅Who made it — The signature links the certificate to a trusted organization.
  • 🛡️Nobody changed it — If anyone edits the certificate, the signature breaks.

🔗 Who Signs Them?

A Certificate Authority (CA) — a trusted organization that verifies website owners and issues signed certificates. Your browser ships with a list of CAs it trusts.

📚 Want to learn more about CAs? See Spork 101 for a full explanation.

⚠️ Today's Math Will Break

Today's encryption relies on math problems that take billions of years to solve. Quantum computers solve those specific problems efficiently — breaking the protection.

⚠️ When a powerful enough quantum computer arrives, today's encryption and signatures will no longer protect your data.

💡 New Math Already Exists

NIST published new standards (August 2024) using math that quantum computers cannot break. The transition has begun.

✅ The fix exists. Websites, apps, and CAs just need to switch to it.

📋 What Needs to Change

  • 🔐Encryption keys — New key types that quantum computers cannot crack.
  • ✍️Signatures — New signature math for certificates and documents.
  • 📄Certificates — CAs need to issue certificates using the new math.
📚 Want to understand the new algorithms? See Forge 101 for a plain-English breakdown.