Knowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, individual lessons, and BMC Cyber Challenge activities.

Technology overviewBeginner

Encryption, Hashing, and Digital Certificates

Encryption protects confidentiality, hashing produces fixed-length representations for integrity and comparison, and certificates bind public keys to identities or services.

Encryption

Encryption transforms plaintext into ciphertext using an algorithm and key so that authorized parties can recover the original information.

Hashing

A cryptographic hash produces a fixed-length output and is designed to make reversal and undetected modification difficult. Hashing is not encryption because there is no decryption key.

Digital certificates

A certificate contains identity information, a public key, validity information, and a digital signature from an issuing authority. It supports authentication and trusted key distribution.

Keep the purposes separate

Many errors begin when people treat encryption, hashing, encoding, signing, and certificates as interchangeable. Each solves a different problem and depends on sound key and trust management.

Certification relevance

This subject appears in or supports the following certification bodies of knowledge:

CompTIA Security+ISC2 CCISC2 CISSP

Authoritative sources