The core pillars of information security (CIA triad + Non-Repudiation) and their cryptographic enforcement.
1. Core Guarantees & Cryptographic Primitives
| Goal | Definition | Threat Model Vector | Cryptographic Primitive |
|---|---|---|---|
| Confidentiality | Ensures unauthorized entities cannot read the payload data. | Passive Eavesdropping, Man-in-the-Middle sniffing. | Symmetric Encryption (AES-GCM, ChaCha20), Asymmetric Encryption (RSA, ECIES). |
| Integrity | Guarantees data has not been modified, deleted, or added to in transit. | Active Tampering, bit-flipping attacks, data corruption. | Cryptographic Hash Functions (SHA-256, SHA-3), Message Authentication Codes (HMAC). |
| Authentication | Verifies the true identity of the communication peer. | Identity spoofing, impersonation, phishing. | Digital Certificates (X.509), Digital Signatures (ECDSA), challenge-response handshakes. |
| Non-Repudiation | Prevents the sender from denying they generated or sent a payload. | Fraudulent denial of transactions, message forging. | Asymmetric Digital Signatures (only the owner of the private key could sign the message). |