Skip to main content
MI Support IT logo

IT security

What is ciphertext?

Ciphertext is data in encrypted form: unreadable without the right key. See why the concept is central to GDPR and protection against data breaches.

In short

Ciphertext is the term for data in encrypted form: the result of readable plaintext being run through an encryption algorithm with a secret key.

Without the key, ciphertext appears as random noise that reveals nothing about the content, and that is the whole point: if encrypted data is stolen or intercepted, the thief effectively has nothing. That is why encryption is a central technical measure under GDPR, and why a stolen, encrypted laptop can often be handled as lost hardware rather than a reportable data breach.

The security depends entirely on key management, however: if the key is stored alongside the data, the encryption is worthless. The concept has also gained new relevance with the quantum threat, where attackers harvest ciphertext today in order to decrypt it once quantum computers can break today's algorithms. MI Support IT helps Danish businesses with encryption and key management that holds up in practice.

Back to the glossary

What is ciphertext?

Ciphertext is data after encryption: the unreadable version of your files, emails or databases, which can only be made readable again with the right key. Its counterpart is plaintext: data in the form humans and programs can read. The transformation between the two is performed by a cipher, that is, an encryption algorithm, together with a key.

Good ciphertext is characterised by looking like random noise: it reveals neither content, patterns nor structure. Even if an attacker intercepts gigabytes of it, they are left with nothing, as long as the key is protected.

Why does the concept matter to your business?

Because the difference between plaintext and ciphertext is, in practice, the difference between a disaster and a footnote:

  • A stolen laptop with plaintext data is a data breach that may have to be reported to the Danish Data Protection Agency (Datatilsynet). The same laptop with an encrypted disk is typically just lost hardware.
  • A database extract an attacker pulls from a hacked server is worthless if the fields containing sensitive information are encrypted, and worth gold if they sit in plaintext.
  • Ransomware groups today threaten to leak stolen data. If the data is encrypted with keys the attacker did not get, the threat loses its force.

That is why the Danish Data Protection Agency points to encryption as a central technical measure under GDPR, both for data at rest and in transit.

Ciphertext is only as secure as the key

The classic mistake is to encrypt the data and leave the key right next to it: in the same folder, in a script or in plaintext in a configuration file. Then the ciphertext is effectively plaintext for anyone who breaks in. Professional operations require key management: separate storage, access control, rotation, and for the most critical keys an HSM, where the key can never be exported.

On top of that comes a newer threat: harvest now, decrypt later, where attackers intercept and store ciphertext today with a view to decrypting it once quantum computers can break today's asymmetric encryption. For data with a long confidentiality lifetime, that is a risk to address already now. See quantum cryptography.

How MI Support IT can help

We make sure your sensitive data is ciphertext where it matters (encrypted devices, servers, backup and connections), and that the keys are managed and protected via PKI management. All of it forms part of your overall IT security. Contact us for a review of where your data actually sits in plaintext today.

Shall we talk about your business and your needs?

Real people talking to real people. We get back to you the same day.

Write to usBook a meeting