cryptographic protection

A category of security control — specifically, the application of cryptographic mechanisms (such as encryption, hashing, message authentication codes, or digital signatures) to enforce one or more security properties — confidentiality, integrity, authenticity, and non-repudiation — for data at rest, in transit, or in backup. Cryptography can provide several security services: confidentiality, identity authentication, data integrity authentication, source authentication, and support for non-repudiation. In standards practice, the expression names a named control enhancement: NIST SP 800-53 uses "Cryptographic Protection" as an enhancement under System and Communications Protection, requiring that information systems implement cryptographic mechanisms to prevent unauthorized disclosure and modification of defined information on defined system components. The field applies it broadly across contexts — covering transmission confidentiality and integrity, backup information, and storage — wherever cryptographic mechanisms are the chosen means of enforcing a security requirement, with the specific operation depending on the algorithm: encrypting or signing data, generating a hash or MAC, or establishing keys.