Does information confidentiality infer information integrity?

Information confidentiality does not infer information integrity. These are distinct security properties.

Confidentiality means that information is not disclosed to unauthorized individuals or systems. For example, an encrypted document might be confidential because only those with the correct key can decrypt and read its content.

Integrity means that information has not been altered or destroyed in an unauthorized manner. This ensures the data is accurate and complete. For instance, a document could be confidential (encrypted), but an attacker could still alter the encrypted data without decrypting it, thereby corrupting its integrity once decrypted. Conversely, a public document (no confidentiality) can still have its integrity protected through digital signatures, ensuring it has not been tampered with.

For further reading, refer to chapters discussing security goals in Guide to Computer Network Security by Joseph Migga Kizza.