ARS · CLAVIS · UNICA

Symmetric · Encryption · in Transit

Watch a message become ciphertext, cross the network, and return.
Rolling Thunder Security · Cybersecurity Fundamentals
PUBLIC · NETWORK SENDER IMANI Plaintext Encryption Ciphertext Decryption Plaintext RECEIVER CLIFF Secret Key EVE · EAVESDROPPER SHE SEES THE WIRE BUT NOT THE KEY · · · · · · UNREADABLE WITHOUT KEY BOILER UP PLAINTEXT
STAGE Plaintext at Sender
The message exists in readable form on Imani's machine, ready to be encrypted before it crosses the network.
1 of 7
SPEED

The Setup

Imani (sender, on the left) wants to send a message to Cliff (receiver, on the right). Between them sits the public network: the open internet, a corporate WAN, a Wi-Fi café, anywhere they don't fully control. Eve, our friendly eavesdropper, sits below the wire and reads everything that goes by. The goal of symmetric encryption is simple: Imani and Cliff want to communicate so that Eve can copy every byte of traffic and still learn nothing.

What Each Color Means

Plaintext (green)Readable form, on a trusted endpoint only
Ciphertext (rust)Encrypted form, safe to send over hostile channels
Secret Key (amber)Shared between Imani and Cliff in advance
Eavesdropper (rust)Sees the wire, can copy traffic, lacks the key

Stage by Stage

1. Plaintext at Sender. The message BOILER UP exists on Imani's computer in its original form. It is safe here because the endpoint is trusted.

2. Entering Encryption. The message moves from Imani's plaintext buffer into the encryption routine. It is still plaintext at this moment, still inside her trusted machine.

3. Encryption with Secret Key. The encryption algorithm consumes two inputs: the plaintext and the shared secret key. The key arc from the top lights up to indicate the key is being applied. The message visibly transforms into scrambled ciphertext.

4. Ciphertext Crosses the Network. The packet travels through the public network as ciphertext. Eve sees the bytes go by and her thought bubble pops up showing exactly what she sees: meaningless characters. Without the key, no amount of staring at this packet will recover the original message.

5. Decryption with Secret Key. The packet arrives at Cliff's machine and enters the decryption routine. The key arc from the secret key over to decryption lights up. Cliff has the same shared key Imani used (this is the defining property of symmetric encryption). The algorithm reverses the transformation.

6. Plaintext to Receiver. The recovered plaintext travels from the decryption routine into Cliff's plaintext buffer.

7. Plaintext at Receiver. Cliff now reads BOILER UP in its original form. The message has crossed a hostile channel and arrived intact and confidential.

The Hard Problem Hiding in This Diagram

Notice that the secret key is shown above the network as a single shared object. The animation does not show how it got there. That is on purpose: it is the hardest problem in symmetric cryptography. If Imani and Cliff have never met and have no prior secure channel, how do they agree on a key without Eve also learning it? Caesar's solution was to hand-deliver keys via trusted courier. Modern systems use asymmetric cryptography (covered later in the course) to bootstrap a shared symmetric key over an untrusted channel.

Why Symmetric Encryption Still Wins

Despite the key-distribution problem, symmetric encryption is what actually moves your data. Algorithms like AES are orders of magnitude faster than asymmetric algorithms like RSA, and they scale to the gigabytes-per-second throughput that modern networks demand. In practice, real systems use asymmetric crypto only to negotiate a session key, then switch to symmetric for the bulk traffic. TLS, SSH, and most VPNs all follow this pattern.

What to Look For

Slow the animation down and watch carefully: the packet's color and label change as it transforms (plaintext to ciphertext to plaintext), the secret key arcs glow with flowing dashes only during the encryption and decryption stages, and Eve's thought bubble appears only while the ciphertext is on the wire. These are the visual cues for the underlying property that makes the whole system work.