technologybriefs
10:04in productionCh. 1 · Classified first/ 10:04 · ceiling 15 min
Security · Tech history

Public-key cryptography

It did not invent trust — it outsourced it to arithmetic.

Public-key cryptography replaces physical key exchange with mathematical asymmetry. It works — but only if implemented correctly, managed rigorously, and defended against evolving threats.

Chapters & takeaways4
  1. 1:03
    Classified first

    GCHQ built working public-key systems before they were published — but secrecy meant no standards, no interoperability, and no ecosystem.

  2. 2:07
    Modulo arithmetic as lock and key

    RSA works by raising messages to powers modulo the product of two large primes — fast to compute, slow to invert without knowing the primes.

  3. 3:53
    Shared secret from public noise

    Diffie–Hellman lets two parties derive the same secret from exchanged public values — no pre-shared data required.

  4. 5:53
    Signatures bind identity to message

    A digital signature proves authorship: anyone can verify it with a public key, but forging it demands the private key.

Worth your time?

Yes. Study the whole thing.

4.5/ 5
What works
  • secure key agreement without pre-shared secrets
  • verifiable digital signatures
  • open public key distribution
What does not
  • guarantee confidentiality without additional protocol safeguards
  • resist quantum computation
  • eliminate key management risk
Study it if
  • system architects
  • software developers
  • infrastructure operators
Skip it if
  • policy makers relying on 'cryptographic magic'
  • teams treating keys as configuration rather than secrets
The written brief1 min read

What it is and the problem it solves

Public-key cryptography is an asymmetric cryptosystem that solves two problems: secure key agreement without prior shared secrets, and verifiable digital signatures. It replaces the logistical bottleneck of symmetric key distribution with mathematical asymmetry.

How it works

It uses one-way mathematical functions: exponentiation modulo a product of two large primes (RSA) or discrete logarithms (Diffie–Hellman). Public keys are openly shared; private keys remain secret. Encryption, decryption, and digital signatures all rely on the asymmetry — easy to compute in one direction, computationally hard to reverse without the private key.

What works

Diffie–Hellman key exchange establishes shared secrets over untrusted channels. RSA encrypts, decrypts, and signs using modular exponentiation. Both allow public keys to be published freely while preserving security — provided private keys stay secret and implementations avoid known pitfalls.

What does not

It does not guarantee confidentiality on its own. It requires authenticated channels for Diffie–Hellman and proper padding for RSA to resist known attacks. It offers no protection against compromised private keys, side-channel leakage, or quantum computation.

What it changes

It eliminates the need for pre-shared secrets in open networks. It enables verifiable authorship at global scale. It shifts trust from physical key distribution to computational assumptions and key management discipline.

Is it worth your time

Yes. It is the operational foundation of TLS, SSH, PGP, and every modern digital signature scheme. If you handle authentication, encryption, or integrity verification in software or infrastructure, you depend on its mechanisms — not just its abstractions.

Same field · Security4 of 27
10:52
Unmanned aerial vehicleUAVs are aircraft without onboard pilots. They solve access problems in hazardous or repetitive aerial tasks. Their mechanism relies on remote control or programmed autonomy, enabled by improved electronics and cheaper components. Military adoption was complete by the twenty-first century. Civilian use followed regulatory shifts: UAS terminology formalised in 2005; FAA civilian airspace permission came in 2006; DJI’s 2013 Phantom lowered the consumer barrier. But autonomy remains narrow: Ingenuity flew on Mars (2021–2024), yet no global standard governs lethal AI targeting—the Kargu 2’s 2020 Libya strike exposed that gap. Certification lags: EASA’s 2024 ETSO-C198 basis for Embention’s flight controller is the first of its kind. UAVs change who bears risk—and who decides when a machine may act.
9:20
Cloudflare2009Cloudflare is a reverse-proxy infrastructure service founded in 2009. It improves web performance and blocks DDoS attacks by sitting between users and origin servers. Its global network serves ~21.3% of websites as of January 2026. It uses physical entropy sources—including lava lamps in San Francisco—for cryptographic randomness. It had 162,086 paying customers in Q4 2022. It went public in 2019.
9:19
Military robotMilitary robots are mobile machines—autonomous or remote-controlled—used for transport, surveillance, search-and-rescue, and attack. They reduce human exposure but do not eliminate human responsibility. Full autonomy remains illegal. Their real impact lies in compressing decision cycles and testing the limits of existing law—not in replacing soldiers.
8:50
File Transfer ProtocolAbhay Bhushan · 1971FTP is a foundational but fatally flawed protocol. It delivered interoperable file transfer in 1971, but its reliance on unencrypted channels and rigid two-connection architecture made it unsustainable. It changed how machines shared data — then became the textbook example of inherited insecurity.
Up next in Technology

PyTorch

Facebook · 2016 · 10:11

PyTorch is not a framework for production—it’s a research accelerator with production debt.

10:11