Lesson 04 — Hashing Algorithms

Lesson Overview

Imagine downloading a software installer from the Internet.

How do you know the file hasn’t been modified by an attacker?

Or imagine a website storing millions of user passwords.

Should it save every password in plain text?

Absolutely not.

Instead, organizations use Cryptographic Hash Functions.

Hashing allows organizations to:

Verify file integrity
Detect data tampering
Store passwords securely
Support digital signatures
Protect software updates
Secure blockchain transactions

Unlike encryption, hashing is a one-way mathematical process.

Once data is hashed, it cannot be reversed back to its original form.

Hashing is one of the most widely used technologies in cybersecurity and is fundamental to cloud security, DevSecOps, PKI, digital signatures, and secure authentication.

Learning Objectives

After completing this lesson, you will be able to:

Understand cryptographic hashing.
Differentiate hashing from encryption.
Learn how hash functions work.
Explore common hashing algorithms.
Understand password hashing.
Learn salting techniques.
Explore enterprise use cases.
Apply hashing best practices.

What is Hashing?

A Cryptographic Hash Function converts input data of any size into a fixed-length output called a hash, digest, or checksum.

Example:

Input

Hello World

↓

Hash Function

↓

a591a6d40bf420404a011733cfb7b190...

Even a tiny change to the input produces a completely different hash.

Why Hashing Matters

Organizations use hashing to:

Verify data integrity.
Detect file modifications.
Secure passwords.
Protect software updates.
Support digital signatures.
Verify blockchain transactions.
Ensure data authenticity.

Hashing protects the integrity of digital information.

How Hashing Works

Original Data

↓

Hash Algorithm

↓

Fixed-Length Hash Value

Unlike encryption, hashing is one-way.

The original data cannot be recovered from the hash.

Characteristics of a Good Hash Function

A secure cryptographic hash function should have the following properties:

Deterministic output
Fast computation
Fixed-length output
Collision resistance
Pre-image resistance
Avalanche effect

These properties make hashing suitable for security applications.

Deterministic Output

The same input always produces the same output.

Example:

Hello

↓

SHA-256

↓

Same Hash Every Time

Consistency is essential for integrity verification.

Fixed-Length Output

Regardless of input size, the hash output has a fixed length.

Examples:

Algorithm	Output Size
MD5	128 bits
SHA-1	160 bits
SHA-256	256 bits
SHA-512	512 bits

Avalanche Effect

A tiny change in input produces a completely different hash.

Example:

Password123

↓

SHA-256

↓

Hash A

Password124

↓

SHA-256

↓

Completely Different Hash

This property makes tampering easy to detect.

Collision Resistance

A collision occurs when two different inputs produce the same hash.

A strong hash function makes finding collisions computationally infeasible.

Collision resistance is critical for digital signatures and certificates.

Pre-image Resistance

Given a hash value, it should be computationally infeasible to determine the original input.

This property protects stored password hashes.

Hashing vs Encryption

Hashing	Encryption
One-way process	Two-way process
Cannot be reversed	Can be decrypted
Used for integrity	Used for confidentiality
No decryption key	Requires encryption keys

Both technologies serve different security purposes.

Common Hashing Algorithms

Widely used hashing algorithms include:

MD5
SHA-1
SHA-256
SHA-384
SHA-512
SHA-3

Modern enterprise systems primarily use the SHA-2 and SHA-3 families.

MD5

Characteristics:

128-bit output
Very fast
Collision vulnerabilities
No longer considered secure

MD5 should not be used for security-sensitive applications.

SHA-1

Characteristics:

160-bit output
Previously widely used
Collision attacks demonstrated
Deprecated for most security purposes

SHA-1 has largely been replaced by SHA-2.

SHA-2 Family

The SHA-2 family includes:

SHA-224
SHA-256
SHA-384
SHA-512

SHA-256 is one of the most widely used hashing algorithms in enterprise environments.

SHA-3

SHA-3 is the latest NIST-standardized hashing family.

Benefits include:

Strong security
Different internal design
Resistance to emerging attack techniques

Many organizations are beginning to adopt SHA-3 alongside SHA-2.

Password Hashing

Organizations should never store passwords in plaintext.

Instead:

Password

↓

Hash Function

↓

Password Hash

↓

Database

During login:

User Password

↓

Hash

↓

Compare Stored Hash

↓

Authentication

Only hashes—not passwords—are stored.

Salting

A salt is a random value added before hashing.

Example:

Password

+

Random Salt

↓

Hash Function

↓

Secure Password Hash

Salting protects against:

Rainbow Table Attacks
Identical Password Detection
Precomputed Hash Attacks

Every password should use a unique salt.

Password Hashing Algorithms

Modern password hashing algorithms include:

bcrypt
scrypt
Argon2
PBKDF2

These algorithms are specifically designed for secure password storage.

Hashing in Cloud Computing

Cloud providers use hashing for:

AWS

IAM Password Verification
S3 Integrity Validation
AWS Signatures

Microsoft Azure

Identity Verification
Storage Integrity
Microsoft Entra Authentication

Google Cloud

Identity Services
Cloud Storage Validation
Secure Authentication

Hashing supports integrity across cloud platforms.

Hashing in Kubernetes

Kubernetes uses hashing for:

Configuration Validation
Secret Verification
Certificate Fingerprints
Image Digests
Container Integrity

Hash values help detect unauthorized modifications.

Hashing in DevSecOps

DevSecOps teams use hashing for:

Software Integrity
Container Image Digests
Git Commit Verification
Artifact Validation
Software Supply Chain Security

Hashes help verify that software has not been tampered with.

Hashing in Artificial Intelligence

AI environments use hashing for:

Model Integrity
Dataset Verification
API Validation
Artifact Verification
Secure Model Distribution

Hashing ensures AI assets remain unchanged.

Enterprise Use Cases

Organizations commonly use hashing for:

Password Storage
File Integrity
Digital Signatures
Blockchain
TLS Certificates
Secure Software Distribution
Data Validation
Certificate Fingerprints

Common Beginner Mistakes

Avoid:

Storing plaintext passwords.
Using MD5 for password storage.
Using SHA-1 for new applications.
Forgetting to use salts.
Creating your own hashing algorithm.
Assuming hashing provides confidentiality.

Hashing protects integrity—not confidentiality.

Enterprise Best Practices

Professional organizations:

Use SHA-256 or stronger for integrity verification.
Use bcrypt, Argon2, scrypt, or PBKDF2 for passwords.
Salt every password.
Monitor file integrity.
Verify software downloads.
Deprecate MD5 and SHA-1.
Protect password databases.

These practices improve enterprise security and resilience.

Real-World Example

CloudNova Technologies distributes software updates to customers.

Software Package

↓

SHA-256 Hash Generated

↓

Published with Download

↓

Customer Downloads File

↓

Recalculate SHA-256

↓

Hashes Match

↓

Software Verified

Customers can verify that the downloaded software has not been altered during transmission.

Key Takeaways

After completing this lesson, you should understand:

Cryptographic Hashing
Hash Functions
Message Digest
Collision Resistance
Pre-image Resistance
SHA-2
SHA-3
Password Hashing
Salting
Enterprise Hashing Best Practices

Summary

Cryptographic hashing is one of the most fundamental technologies in cybersecurity.

By generating fixed-length digests, hash functions enable organizations to verify data integrity, securely store passwords, validate software, support digital signatures, and detect unauthorized modifications across cloud, enterprise, and internet environments.

Hashing is a foundational skill for Cloud Security Engineers, Security Architects, DevSecOps Engineers, IAM Engineers, SOC Analysts, and cybersecurity professionals responsible for protecting the integrity of digital systems.

Next Lesson

➡️ Lesson 05 — Digital Signatures

In the next lesson, you’ll learn how Digital Signatures provide authenticity, integrity, and non-repudiation. You’ll explore public key cryptography, certificate-based signing, code signing, document signing, and enterprise digital signature implementations used across cloud, DevSecOps, and secure communications.