Symmetric key encryption
Symmetric-key encryption is cryptography that uses the same shared secret key, or equivalent derived key material, to encrypt and decrypt data.
Real-World Cryptography
Symmetric encryption is an encryption technique in which the same secret key, or equivalent shared secret, is used for encryption and decryption.
- How it is used
- Protects message confidentiality when communicating parties already share a secret key.
- How deep it goes
- Explains plaintext, ciphertext, encryption, decryption, shared keys, key exchange, and the limits of unauthenticated encryption.
- Examples
- Uses Alice and Bob’s letter exchange, ENCRYPT and DECRYPT functions, and an AES example encrypting “hello.”
- What you can do after
- Evaluate when shared-key encryption provides confidentiality and recognize why secure applications require authentication.
Read how Real-World Cryptography explains symmetric key encryption →
Grokking Relational Database Design
Symmetric encryption is reversible encryption that uses the same secret key for encryption and decryption.
- How it is used
- Protects sensitive database information that applications must later retrieve in its original form.
- How deep it goes
- Defines reversibility, explains shared keys and algorithms, and names variants without detailing implementation procedures.
- Examples
- Uses saved credit-card information in an online store as the central example.
- What you can do after
- Apply it to encrypt and later decrypt sensitive values stored for repeated application use.
Read how Grokking Relational Database Design explains symmetric key encryption →
Hacking Cryptography
Cryptography in which communicating parties use the same secret key or shared secret for corresponding cryptographic operations.
- How it is used
- Protects confidentiality efficiently when communicating parties already possess the same secret key.
- How deep it goes
- Explains the shared-key model, OTP tradeoff, cipher categories, Kerckhoff’s principle, and key exchange, but not cipher internals.
- Examples
- Uses an encryption/decryption flow, a one-time-pad comparison, and MAC-protected API and password-reset messages.
- What you can do after
- Evaluate symmetric encryption’s confidentiality, performance, key-material requirements, and secret-key distribution risks.
Read how Hacking Cryptography explains symmetric key encryption →
Software Security for Developers
Symmetric key cryptography uses the same secret key, or closely related shared keys, to protect and recover data.
- How it is used
- Protects application data in storage and communications, including cloud services, databases, disks, and TLS.
- How deep it goes
- Explains plaintext, ciphertext, keys, AES modes, IVs, authentication tags, and practical configuration risks.
- Examples
- Uses AES block encryption, ECB and CBC failure modes, AES-GCM, IVs, authentication tags, and Java Cipher.
- What you can do after
- Apply AES-GCM through a developer-friendly library while avoiding insecure modes and IV reuse.
Read how Software Security for Developers explains symmetric key encryption →
Server-Side WebAssembly
Symmetric encryption is encryption in which the same secret key is used for both encryption and decryption.
- How it is used
- Protects sensitive database values while enabling authorized storage and retrieval through Wasm user-defined functions.
- How deep it goes
- Explains plaintext, ciphertext, shared keys, Base64 conversion, 256-bit configuration, and graceful failure handling.
- Examples
- Demonstrates Rust encrypt and decrypt functions backed by Magic Crypt and exposed through libSQL bindings.
- What you can do after
- Build database encryption and decryption functions with Rust, Magic Crypt, Wasm, and libSQL bindings.
Read how Server-Side WebAssembly explains symmetric key encryption →
Data Pipelines with Apache Airflow, Second Edition
Symmetric encryption is encryption that uses the same secret key for encryption and decryption.
- How it is used
- Protects Airflow passwords, connections, and variables at rest, and contributes session protection within HTTPS.
- How deep it goes
- Explains the shared-key model, Fernet configuration, storage flow, and key-loss risks without detailing cipher internals.
- Examples
- Uses Airflow secret storage, Fernet.generate_key(), environment configuration, protected key files, and HTTPS session keys.
- What you can do after
- Operate/configure Airflow secret encryption and explain how HTTPS combines symmetric and asymmetric encryption.
Read how Data Pipelines with Apache Airflow, Second Edition explains symmetric key encryption →
Related concepts
- public key cryptographycontrasts with · Public-key cryptography is asymmetric cryptography that uses mathematically related public and private keys for encryption, decryption, signing, and verification.
- TLSused by · Transport Layer Security (TLS) is a cryptographic protocol that protects network communications through confidentiality, integrity, and authentication of communicating endpoints.
- encryptionkind of · Encryption is the cryptographic transformation of readable data into ciphertext to conceal its contents, reversible through decryption with appropriate information.
- API keyuses · An API key is a credential used to identify or authorize a client accessing an application programming interface.
- AESincludes · AES is a standardized symmetric block cipher that encrypts and decrypts data in 128-bit blocks using 128-, 192-, or 256-bit keys.
- cryptographic keyuses · A cryptographic key is a value supplied to a cryptographic algorithm to control operations such as encryption, decryption, signing, authentication, or verification.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.