The math that lets you send a secret across a world full of eavesdroppers, and why even a supercomputer running for billions of years couldn't crack it. A picture for every idea.
secrets on an open wire
Every message you send online passes through machines you don't control. So how can you type a password or send a private message safely? The answer is cryptography: scrambling a message so that only the right person can unscramble it, even if everyone in between can see the scrambled version.
same key locks and unlocks
The classic method: you and your friend share a secret key. You use it to scramble (lock) the message; they use the same key to unscramble (unlock) it. Fast and effective, but there's a catch that stumped people for centuries: how do you share the key in the first place without an eavesdropper grabbing it?
public-key cryptography
The genius idea that powers the modern internet: give everyone two keys, a public key and a private key. You hand out your public key freely (it only locks). You keep your private key secret (it's the only thing that unlocks). Now anyone can send you a locked message, but only you can open it, and you never had to share a secret first.
one-way math
Public-key crypto rests on math that's easy to do one way but practically impossible to undo. For example, multiplying two huge prime numbers is quick. But taking the giant result and figuring out which two primes made it? That could take the fastest computers longer than the age of the universe. The lock is trivial to close and effectively impossible to pick.
the two keys, used in reverse
The two-key trick does something else amazing. If you scramble something with your private key, anyone can check it with your public key, proving it could only have come from you, and that no one altered it. That's a digital signature. It's how your device knows an app update is genuine, or that a website is the real one and not an impostor.
the numbers are simply too big
Couldn't an attacker just try every possible key? In theory, yes. In practice, the number of possible keys is so vast that trying them all would take longer than the universe has existed, even with every computer on Earth combined. Security here isn't about hiding the method (it's public knowledge); it's that the math makes guessing hopeless.
The problem. Send secrets over lines that everyone can see.
Shared key. Same key locks and unlocks, but sharing it safely was the hard part.
Two keys. A public key anyone can lock with, a private key only you can unlock with.
One-way math. Easy to lock, effectively impossible to reverse without the private key.
Signatures. Using the keys in reverse proves a message is authentic and untampered.
Brute force fails because the number of possible keys is astronomically large.