Most explanations of public-key cryptography reach for keys and locks, which is fine until you ask the obvious question — if everyone can see the lock, why can't they open it? Here is a picture that answers that question honestly. Imagine the public number — the product of two secret primes — as a long coil of wire, wound and joined into one seamless loop. To make it, you took two shorter coils, one of length p and one of length q, and welded them together at a single point. That weld is a kink. And the security of the whole system is one fact about that kink: once the weld is made, the seam is invisible.
IThe seamless coil
Hand the coil to anyone. Hand it to your adversary. There is nothing to hide in the coil itself — it is the public key, made to be shared. Let them turn it over in their hands, measure it, examine every inch. They will not find the weld, because a clean weld leaves no seam. The coil is one smooth loop, and the single point where p ends and q begins looks exactly like every other point along it.
So if someone wanted to take it apart — to recover the two pieces it was made from — they would have to cut it. And to cut it correctly, they would have to snip at the exact kink, the one invisible point where the weld is. Snip anywhere else and the coil falls into two pieces that are not p and q, that multiply back to nothing meaningful. There is no mark to aim for, no bump under the fingers, no warmth as the blade nears the right spot. Just a seamless loop and one unmarked point that matters. To cut it apart by guessing, you would have to be impossibly lucky — and impossibly lucky, across a coil this long, means never.
The weld is invisible to everyone — including, if they ever lost the measurement, the person who made it.
That last point is the one that makes this honest, and it is worth dwelling on. Your power over the coil is not better eyesight. You cannot see the seam any more than your adversary can. If you forgot where you welded it, you would be as lost as they are, snipping blind. The seam is not a feature of the coil. It is a fact you have to remember.
IIThe two coils that tell you where to cut
So what lets you cut where no one else can? Not the coil in front of you — the two coils in your other hand. You still hold the original p-coil and q-coil, the two pieces you welded together. And they tell you where the seam is. Lay the p-coil against the public loop, measure off its length, and your blade is at the weld — exactly, every time, no luck involved. To know p is to know where to cut. The two private coils are the map to the invisible seam, and holding the map is the entire secret.
This is the whole shape of a private key. It is not a feature hidden somewhere inside the public number, waiting to be found by anyone clever enough. It is a separate thing you kept — the two pieces, the measurement, the note that says here is the seam. Anyone may hold the lock. Only you hold the map. And the map points only one way.
IIIWhy it only points one way
Here is the asymmetry that holds everything up. The two private coils tell you where to cut the public one — that direction works, instantly. But the public coil does not tell you where the two private coils are. You can examine N all you like; it will not point back to p and q, because the welding kept no record of the seam. The pieces point to the product; the product never points back to the pieces.
And so the lock holds in plain sight. Anyone can verify a cut once it is made — snip the coil into two pieces, multiply them, and check that they rejoin into N; that is easy, anyone can do it. What no one can do, without already holding the private coils, is find the cut in the first place. Easy to check, impossible to find. The public coil is given freely to the world precisely because the seam is invisible without the map — and only you hold the map.
The product points to the lock. Only the factors point to the cut. And the factors are the one thing the product will never give back.
That is public-key cryptography, with nothing left out. A seamless coil anyone may hold, an invisible weld no one can see, two private coils that alone reveal where to cut, and a product that — however long you turn it over — never tells you where its own seam is. You can give the lock to everyone because the secret was never in the lock. It was always in the map, and the map only ever pointed one way.
A note on the picture: this describes the structure of RSA specifically, where the public number is a product of two secret primes. The coil is a way to see why a public key can be shared safely — it is faithful to how the real thing works, not a new scheme. The same one-way shape underlies other systems too, built from different operations; what stays constant is that the public value never points back to the private one. And as elsewhere on this site: the hardness of finding the cut is trusted because it has survived sustained attack, not because anyone has proved it — which is why the move to quantum-resistant locks is already underway.