The Intersection of Encryption and AI
Security Boulevard, Tuesday, June 2nd, 2026
Bruce Schneier argues encryption remains necessary but insufficient as AI reshapes the wider cybersecurity landscape.
In this essay, Bruce Schneier revisits his long-held view that strong cryptography, while mathematically robust, cannot alone secure systems because it must be embedded in software, operating systems, hardware, networks, and human operation.
He distinguishes the durable math of encryption from the perpetual arms race of practical computer security against threats like denial-of-service, identity theft, and network penetration.
He notes AI is not advancing cryptography itself but is transforming cybersecurity, demonstrating superhuman ability to find software vulnerabilities and write exploits, enabling rapid iteration. The core message: cryptography is necessary but not sufficient, and systemic security depends on integration across the full stack and informed human operators.