A trapdoor function is easy to compute in the forward direction, y = f(x), but computationally difficult to invert, x = f⁻¹(y), without secret auxiliary information t called the trapdoor. It provides the mathematical basis for asymmetric cryptography: public operations remain difficult to reverse without the private key. section 8.2.3 section 8.5
Easy down, hard back up
A dungeon trapdoor illustrates the asymmetry: anyone can fall through, but returning requires a key or special help. In RSA, multiplying two large primes p and q to produce n is easy when the factors are known; factoring n to recover p and q is computationally expensive without them. section 8.2.3 section 8.3.2
Figure 8.8 Mapping \(f\)’s range values to the domain is hard without special information \(t\).
Maps the function’s range back to its domain and highlights why special information t is needed for practical inversion. section 8.2.3

