In the gaming world mushrooms give you extra life, unlock hidden abilities, or transform your character. In the real-world equivalent of navigating the digital universe, encryption is the mushroom: a small but powerful tool that transforms your security, protects your identity, and opens doors to safe online exploration.
Like the power-up, it is temporary, situational, and does not make you invincible. It also does not do the thing the box art implies. Worth knowing which abilities you actually collected.
Two kinds, doing two different jobs
Symmetric encryption uses one key for both locking and unlocking. It is fast — fast enough to encrypt a video stream on a phone without the battery noticing — and it has one inconvenient requirement: both ends must already share the key. If you can securely deliver a key to someone, you could have securely delivered the message. This is the oldest problem in the field.
Asymmetric encryption uses a pair: a public key you hand to anybody, and a private key you never share. Something locked with one is opened only by the other. It solves the delivery problem beautifully and is far too slow to run a connection on.
So real systems use both, and the interesting part is the handoff.
The handshake, which is the actual magic
When your VPN or your browser connects, the two ends perform a key exchange. The elegant result — and this is genuinely one of the better ideas of the twentieth century — is that they arrive at a shared secret that never crossed the wire.
Each side generates a private value, derives a public one from it, and sends only the public one. Each then combines its own private value with the other's public value. The mathematics guarantees both arrive at the same answer, and that an observer holding both public values cannot compute it. The key is not transmitted. It is independently constructed at both ends from things that were safe to say out loud.
That shared secret becomes the symmetric key, and the rest of the session runs on the fast cipher. Asymmetric to agree, symmetric to work.
Forward secrecy: the ability worth caring about
Here is the property that matters more than any cipher name, and that almost no marketing page mentions.
If the exchange generates fresh values for every session and discards them afterwards, then compromising a long-term key tomorrow reveals nothing about today. Each session was locked with something that no longer exists anywhere. An adversary who recorded your encrypted traffic for a year and later obtained the server's key gets a year of noise.
Without forward secrecy, that same recording becomes readable retroactively, in one move. Traffic is cheap to store and patient adversaries exist; “record now, decrypt later” is a real strategy, not a thought experiment.
Modern protocols do this by default. WireGuard rekeys constantly by design; TLS 1.3 requires it. It is one of the strongest arguments for using current software rather than whatever has been running since 2016 — see the protocol comparison for what else the modern option buys you.
Why “military-grade AES-256” is not a feature
It is the algorithm your bank uses, your phone's storage uses, and every HTTPS connection you have made today uses. It is in hardware on every processor made in the last decade. It is a floor, not a differentiator, and the phrase “military-grade” is not a standard anyone administers.
More to the point: the cipher has never been the weak part. Nobody attacking a system attacks the mathematics. They attack the implementation, the key management, the endpoint, the person, or the company holding the logs. Advertising the cipher is advertising the strongest link in the chain, which is a curious thing to do unless the other links are not worth discussing.
A provider worth reading tells you what they retain, who audited that, and when. The word “military” does not appear in useful answers.
Three things the power-up does not cover
The endpoints. Encryption protects data in transit between two machines. On the machine, it is plaintext, because it has to be — that is where it is read. Malware on your laptop sits at the same side of the lock as you do, and the strongest tunnel in the world delivers its output faithfully.
The metadata. Encryption hides content, not the fact of communication. Who, when, how much, how often, in what pattern. Enough to characterise a person without decrypting a single byte, which is precisely why the shape of the route matters as much as the contents.
Whoever holds the key. Every encrypted channel terminates somewhere, and the party at the far end reads it in the clear. For a VPN that is the provider. Encryption does not make them trustworthy; it makes everyone except them irrelevant, which is only an improvement if you picked well.
What to actually check
- Is the protocol modern? WireGuard, or OpenVPN with current defaults. Anything offering PPTP as an option is telling you something about its maintenance schedule.
- Is there forward secrecy? Implied by the above; explicitly absent in old configurations.
- Does the tunnel actually carry everything? Encryption on a leaking tunnel is a locked door in an open wall. Test it.
- Who is at the far end, and what do they keep? The only question the mathematics cannot answer for you.
The mushroom is real. It works, it is remarkable, and the mathematics genuinely holds. It just does not do what the poster implies — and in this game, reading the ability description carefully is most of the skill.