What is the difference between hashing and encryption?

Hashing and encryption are both techniques used to secure data, but they serve different purposes and have distinct characteristics. Here’s a concise breakdown of the differences:

Purpose

• Hashing: The primary purpose of hashing is to verify data integrity. It converts input data (like passwords) into a fixed-size string of characters, which is typically a hash value. Hashing is a one-way process, meaning you cannot retrieve the original data from the hash.

• Encryption: The main purpose of encryption is to protect data confidentiality. It transforms data into a format that is unreadable without a specific key. Encryption is a two-way process, allowing the original data to be recovered using the appropriate decryption key.

Characteristics

• Reversibility:

  • Hashing: Irreversible. Once data is hashed, you cannot convert it back to its original form.
  • Encryption: Reversible. Encrypted data can be decrypted back to its original form using the correct key.

• Output Size:

  • Hashing: Produces a fixed-size output regardless of the input size. For example, SHA-256 always produces a 256-bit hash.
  • Encryption: The output size can vary based on the algorithm and the size of the input data.

• Use Cases:

  • Hashing: Commonly used for storing passwords, verifying data integrity (like checksums), and digital signatures.
  • Encryption: Used for securing sensitive data in transit (like HTTPS) and at rest (like encrypted files).

Example

Here’s a simple illustration of both concepts:

Hashing Example (using SHA-256)

import hashlib

password = "userPassword123"
hashed_password = hashlib.sha256(password.encode()).hexdigest()
print(hashed_password)  # Outputs a fixed-size hash

Encryption Example (using AES)

from Crypto.Cipher import AES
from Crypto.Util.Padding import pad, unpad
import os

key = os.urandom(16)  # Generate a random key
cipher = AES.new(key, AES.MODE_CBC)

data = b"Sensitive Data"
ciphertext = cipher.encrypt(pad(data, AES.block_size))
print(ciphertext)  # Outputs encrypted data

# Decrypting
cipher = AES.new(key, AES.MODE_CBC, cipher.iv)
plaintext = unpad(cipher.decrypt(ciphertext), AES.block_size)
print(plaintext)  # Outputs the original data

Conclusion

In summary, hashing is used for data integrity and is irreversible, while encryption is used for data confidentiality and is reversible. Understanding these differences is crucial for implementing effective security measures. If you have more questions or need further clarification, feel free to ask!