What is Encryption?

Encryption transforms plaintext data into unreadable ciphertext using an algorithm and a key. An authorized party with the correct key can decrypt the data back into a readable form; someone without the key cannot access the meaningful content.

It should not be confused with password storage. Passwords are usually stored with one-way hash functions, while encryption is used when data must be read again later.

Types of Encryption

Symmetric encryption: The same key encrypts and decrypts data. AES is a common example.
Asymmetric encryption: A public and private key pair is used. RSA and ECC are examples.
Encryption in transit: Protects data while it moves across a network.
Encryption at rest: Protects data stored on disks, databases, or backups.
End-to-end encryption: Only the communication endpoints can decrypt the content.

Business Use

Encryption is a core security layer for customer records, payment data, health information, contract files, and backups. HTTPS and SSL/TLS provide encryption in transit for web traffic.

The main risk is often key management rather than the algorithm itself. Keys should not be committed to source code, should be rotated, should have limited access, and should not leave backups exposed under the same weak controls. Regulations such as KVKK may treat encryption as one important part of a broader data protection program, not as a complete solution by itself.