Confusion and diffusion

Confusion and diffusion are the two foundational design principles for secure ciphers, introduced by Claude Shannon in his 1949 communication theory of secrecy systems. Confusion obscures the relationship between ciphertext and key, ensuring that each bit of ciphertext depends on many bits of the key in a complex, nonlinear way. Diffusion spreads the influence of each plaintext bit across the entire ciphertext block, so that a single-bit change in the input alters a large fraction of output bits. Together, they form the architectural logic of the Substitution-permutation network: substitution provides confusion through nonlinearity, while permutation provides diffusion through bit-spreading. No cipher that lacks both properties can be secure, and the iterated alternation of these two primitives across multiple rounds is what produces the computational intractability that underlies modern encryption standards like AES.