CRYPTOGLOSSARY

An encryption method where the same secret key is used for both encrypting and decrypting data. It’s fast and efficient, but requires secure key sharing.

A framework of policies, technologies, and certificates that uses public/private key pairs to enable authentication, encryption, and digital trust. 

A centralized solution that automates key lifecycle tasks, enforces security policies, integrates with applications, and helps organizations stay compliant.

A scalable enterprise platform that connects with HSMs, automates manual key operations, manages multiple formats and apps, and provides audit-ready logging

A management layer that standardizes access to heterogeneous HSMs, giving organizations one unified interface for cryptographic operations. 

Cryptomathic’s advanced key management product delivers compliance, crypto-agility, role-based access, and significant cost savings for enterprises.

Centralized management unifies key control, visibility, and auditing, while distributed management increases complexity and risk of errors.

Quantum computing uses quantum bits (qubits) that can exist in multiple states simultaneously, allowing certain calculations to be performed exponentially faster than with classical computers.

Classical computers use binary bits (0 or 1), while quantum computers use qubits, which can represent 0 and 1 at the same time through superposition. Quantum entanglement and interface enable new problem-solving capabilities.

Quantum cryptography leverages quantum mechanics to secure communications, such as Quantum Key Distribution (QKD), which detects any eavesdropping attempts. 

A sufficiently powerful quantum computer could use Shor’s algorithm to factor large prime numbers quickly, breaking RSA and other public-key cryptosystems. 

Estimates vary, but experts suggest large-scale quantum computers capable of breaking RSA and ECC may appear within the next 10-20 years, making preparation essential now. 

PQC refers to new cryptographic algorithms designed to resist attacks from quantum computers while still being secure against classical attacks

The ability of a system to quickly switch algorithms, key lengths, or cryptographic protocols without major redesign. It future-proofs security against new threats and regulations. 

Organizations should adopt crypto-agility by designing systems that can switch algorithms easily, testing PQC standards, updating key management processes, and planning phased migrations to quantum-safe cryptography. 

A digital identity is the set of electronic attributes and data that represent a person, device, or organization online. It’s used for authentication, access, and verification. 

An IdP is a trusted service that authenticates users and issues identity assertions (like tokens or certificates) so apps and services can verify them.

Credentials (like passwords, certificates, or tokens) prove a person or entity’s claimed identity and are required to access digital services securely.  

A digital wallet stores electronic credentials, certificates, and signatures, allowing users to authenticate and sign securely through mobile or online apps. 

Signer is Cryptomathic’s solution for creating secure digital signatures, binding an identity to content while meeting compliance requirements such as eIDAS.

A TSP issues and manages digital certificates for signatures, authentication, and encryption in compliance with legal and regulatory standards. 

A QTSP is a TSP certified under eIDAS to issue qualified certificates, providing the highest legal assurance across the EU.

A QSCD is a secure device (hardware or software) that ensures only the rightful signatory can use their private key to generate a qualified electronic signature.  

A cryptographic key is a string of bits used in algorithms to encrypt, sign, or verify data. It determines the output of a cryptographic process.

A public key is openly shared and used to encrypt data or verify signatures. A private key is kept secret and used to decrypt data or create signatures.

A key feeds into a cryptographic algorithm to transform data - either scrambling it (encryption), restoring it (decryption), or proving authenticity (signatures).

Key length is the size (in bits) of the key. Longer keys are harder to brute force, making them more secure but also potentially slower in performance. 

A key pair is the combination of a public key and a private key used in asymmetric encryption and digital signatures. The two keys are mathematically linked. 

Keys are essential for both symmetric and asymmetric encryption - determining how plaintext is transformed into ciphertext and back again. 

Private keys create digital signatures, while public keys verify them - ensuring authenticity, integrity, and non-repudiation of data. At rest, keys encrypt stored files, databases, or devices so only authorized parties can read them.

Keys prove identity by signing challenges, establishing secure sessions, or encrypting authentication exchanges between a user and a system.