Cryptographic tools solve different security problems: encoding changes representation, hashing detects change, symmetric encryption protects data with a shared secret, and asymmetric cryptography separates public and private keys. This hands-on course helps you recognize those boundaries and apply each mechanism from a Linux terminal.
You will transform Base64, URL-encoded, and hexadecimal data; generate and verify file hashes; identify likely password-hash formats; and encrypt files with OpenSSL and GPG. A final investigation combines Base64 decoding, detached-signature verification, algorithm identification, and AES decryption into one evidence-driven workflow.
What You Will Learn
- Encode and decode Base64, percent-encoded URLs, and hexadecimal data with command-line tools
- Explain why encoding provides compatibility rather than confidentiality
- Generate MD5, SHA-1, and SHA-256 digests and observe how changed input affects the result
- Create and check SHA-256 checksum files to detect file modification
- Extract hashes from structured data and use length, character set, and
hashidto form algorithm hypotheses - Map likely hash types to Hashcat modes without attempting password recovery
- Encrypt and decrypt files with OpenSSL AES-256-CBC and PBKDF2 password-based key derivation
- Generate a GPG key pair, use public-key encryption, and verify a detached digital signature
Who This Course Is For
This intermediate course is for cybersecurity learners, analysts, system administrators, and developers who need a practical foundation for handling encoded, hashed, and encrypted data. It favors command-line experiments and security interpretation over mathematical proofs or cryptographic implementation.
Prerequisites: Comfort using a Linux terminal, reading files, piping commands, and redirecting output. Basic familiarity with files, passwords, and public/private keys is helpful, but no programming or advanced mathematics is required.
Learning environment: An interactive Ubuntu 22.04 terminal with prepared sample files and access to standard tools including Python, Base64, xxd, OpenSSL, GPG, checksum utilities, and hashid. Exercises use lab-only keys, passwords, and data.
Frequently Asked Questions
Is Base64 a form of encryption?
No. Base64, URL encoding, and hexadecimal are reversible representations that require no secret key. The course demonstrates how easily they can be decoded and contrasts them with key-based encryption.
Does identifying a hash by its length prove which algorithm produced it?
No. Length and character set provide useful clues, and hashid returns possible formats, but several algorithms can look alike. Reliable identification also depends on context such as the source application and storage format.
Will I crack password hashes in this course?
No. You will extract hashes, assess likely algorithms, and record corresponding Hashcat modes as preparation for an authorized audit. Password guessing and recovery are outside this course’s scope.
Are the cryptographic settings presented as production key-management guidance?
No. The labs use simple passwords, an unprotected training private key, and automatic trust settings so you can focus on the operations. The content calls out those conveniences; real private keys and secrets require stronger protection, identity verification, and organizational key-management practices.
