Hashing, Salting, and Encryption: What Problem Does Each Solve?
These controls all transform data, but they are not interchangeable.
Hashing
A cryptographic hash produces a fixed-length digest and is designed to be one-way rather than decrypted back to the original input.
Salting
A salt adds unique random data before hashing, helping defeat precomputed password-hash attacks and making identical passwords produce different stored hashes.
Encryption
Encryption transforms plaintext into ciphertext using a key and is intended to be reversible by an authorized party with the appropriate key.
Exam strategy
Need secrecy with later recovery? Encryption. Need integrity or password verification without recovery? Hashing, often with a salt.
The takeaway
Hashing is one-way, salting strengthens password hashing, and encryption is reversible with the proper key.
Related Summit resources
FAQ
What is the key distinction?
Hashing is one-way, salting strengthens password hashing, and encryption is reversible with the proper key.
What should I identify first?
These controls all transform data, but they are not interchangeable.
Why is this tested?
Separate one-way hashing, password salting, and reversible encryption in information security.