Encoding is a way of translating between different formats. Like converting a Spanish recipe for cake into English.

Encoding

Encryption is a way of protecting data behind a secret. Like sealing a box of chocolate in a locked safe so your kids don’t find it.

Encryption

Hashing is a way of permanently converting from one recognizable thing to something uniform and simple. Like grinding a cow into a hamburger – you can always make a burger, but you can never put the cow back together again.

Hashing

<img width="785" height="471" src="https://eric.mann.blog/wp-content/uploads/2022/01/fig-08-01-2022_01-11-33.jpg" alt="" srcset="https://i0.wp.com/eric.mann.blog/wp-content/uploads/2022/01/fig-08-01-2022_01-11-33.jpg?w=1500&amp;ssl=1 1500w, https://i0.wp.com/eric.mann.blog/wp-content/uploads/2022/01/fig-08-01-2022_01-11-33.jpg?resize=300%2C180&amp;ssl=1 300w, https://i0.wp.com/eric.mann.blog/wp-content/uploads/2022/01/fig-08-01-2022_01-11-33.jpg?resize=1024%2C614&amp;ssl=1 1024w, https://i0.wp.com/eric.mann.blog/wp-content/uploads/2022/01/fig-08-01-2022_01-11-33.jpg?resize=768%2C461&amp;ssl=1 768w, https://i0.wp.com/eric.mann.blog/wp-content/uploads/2022/01/fig-08-01-2022_01-11-33.jpg?resize=1200%2C720&amp;ssl=1 1200w, https://i0.wp.com/eric.mann.blog/wp-content/uploads/2022/01/fig-08-01-2022_01-11-33.jpg?resize=600%2C360&amp;ssl=1 600w, https://i0.wp.com/eric.mann.blog/wp-content/uploads/2022/01/fig-08-01-2022_01-11-33.jpg?w=1120&amp;ssl=1 1120w">In a job interview years ago, the interviewer asked me to explain the difference between encryption, encoding, and hashing. At the time I was working for a company that specialized in encryption, so I took knowing the difference for granted.It wasn’t until much later that I understood how easily most folks can confuse the three topics for one another. Let’s take a look at each in turn.<h2>Encoding</h2>Encoding is the practice of taking data in one format and converting it to another. There are no secrets involved – the specifications for each format are public, well-documented, and easily implemented everywhere.The content of this article is rendered in your browser as either ASCII or UTF-8. What that means is the ones and zeros representing are interpreted in a specific way that converts them into English characters.The text “Hi, folks!” is nothing more than ones and zeros, interpreted as ASCII and converted into readable text. You could just as easily encode this data as hex, which would instead be the string “48 69 2C 20 66 6F 6C 6B 73 21.”These are completely interchangeable. There’s nothing special or magic about encoding, it’s merely a way to interpret and present the underlying, raw data.<h2>Encryption</h2>With encryption, everything changes. Encryption requires a secret (a key, password, or passphrase) that is used to convert usable data into something indistinguishable from random noise. Given an encrypted message, you can only decrypt it if you have the original secret.Unlike with encoding, an encrypted message, like the base64-encoded text “lqNBja38qFHnITloKNzdVg==,” is entirely useless. There is no way you can get from an encrypted message back to the plain text original, even if you know the algorithm used, without the password.If, however, you know this message used AES for encryption. And you know it used “thisisasecret” as the password. Then you can properly decrypt the message and read “Hi, folks!” yet again.<h2>Hashing</h2>Anyone who’s spent any period of time working with encryption has likely used a hashing algorithm as well. Hashes look somewhat like encrypted messages. The underlying algorithms take a piece of plain text and convert it (with or without a key) into something indistinguishable from random noise.Unlike encryption, there is no way back from a hash.These algorithms are one-way. Even if you know the algorithm and any secret keys involved, there is no way to un-hash a string. It’s an entirely destructive operation.<h2>Remembering the difference</h2>The easiest way to remember how these topics differ is with a simple mental model.Encoding is a way of translating between different formats. Like converting a Spanish recipe for cake into English.Encryption is a way of protecting data behind a secret. Like sealing a box of chocolate in a locked safe so your kids don’t find it.Hashing is a way of permanently converting from one recognizable thing to something uniform and simple. Like grinding a cow into a hamburger – you can always make a burger, but you can never put the cow back together again.These are rough analogies, but they should help the next time you’re faced with the same interview question.<h2>Fresh Content. Daily.</h2>Subscribe to get my latest content by email. For free!<div data-element="fields" data-stacked="false"><button data-element="submit">Subscribe</button></div>I won't ever send you spam. Unsubscribe at any time.

Decoding the terms in cybersecurity in a human way.

Encryption, encoding, and hashing are three related but distinct concepts. It's important for you to understand all three.

technologyandthefuture

Technology & The Future

cybersecurity

Cybersecurity

computerscience

Computer Science

In a job interview years ago, the interviewer asked me to explain the difference between encryption, encoding, and hashing. At the time I was working for a company that specialized in encryption, so I took knowing the difference for granted.

It wasn’t until much later that I understood how easily most folks can confuse the three topics for one another. Let’s take a look at each in turn.

Encoding is the practice of taking data in one format and converting it to another. There are no secrets involved – the specifications for each format are public, well-documented, and easily implemented everywhere.

The content of this article is rendered in your browser as either ASCII or UTF-8. What that means is the ones and zeros representing are interpreted in a specific way that converts them into English characters.

The text “Hi, folks!” is nothing more than ones and zeros, interpreted as ASCII and converted into readable text. You could just as easily encode this data as hex, which would instead be the string “48 69 2C 20 66 6F 6C 6B 73 21.”

These are completely interchangeable. There’s nothing special or magic about encoding, it’s merely a way to interpret and present the underlying, raw data.

With encryption, everything changes. Encryption requires a secret (a key, password, or passphrase) that is used to convert usable data into something indistinguishable from random noise. Given an encrypted message, you can only decrypt it if you have the original secret.

Unlike with encoding, an encrypted message, like the base64-encoded text “lqNBja38qFHnITloKNzdVg==,” is entirely useless. There is no way you can get from an encrypted message back to the plain text original, even if you know the algorithm used, without the password.

If, however, you know this message used AES for encryption. And you know it used “thisisasecret” as the password. Then you can properly decrypt the message and read “Hi, folks!” yet again.

Anyone who’s spent any period of time working with encryption has likely used a hashing algorithm as well. Hashes look somewhat like encrypted messages. The underlying algorithms take a piece of plain text and convert it (with or without a key) into something indistinguishable from random noise.

Unlike encryption, there is no way back from a hash.

These algorithms are one-way. Even if you know the algorithm and any secret keys involved, there is no way to un-hash a string. It’s an entirely destructive operation.

The easiest way to remember how these topics differ is with a simple mental model.

These are rough analogies, but they should help the next time you’re faced with the same interview question.

Encoding, Encryption, and Hashing — Remembering the Difference

Encoding

Encryption

Hashing

CURATED BY

CURATOR'S NOTE

Related collections

More like this