= Information integrity
<Information integrity> concerns preserving information against unauthorized alteration or destruction under a stated policy, and detecting violations when they occur. It is distinct from <confidentiality>: a public record can require strong integrity even though everyone may read it.<Integrity in the NIST CSRC Glossary>[integrity definitions]{ref}
For example, a downloaded scientific dataset can be checked against a trusted <checksum> to detect accidental corruption. If an attacker can replace both the dataset and its published unprotected <cryptographic hash function>[hash], that check does not establish authenticity. A <message authentication code> uses a secret key, while a <digital signature> permits verification with a <public key>. These mechanisms protect particular data and contexts; an authorized but mistaken measurement can retain its cryptographic integrity while still being scientifically incorrect.
Back to article page
