What is the key difference between hashing and encryption?
- A.Hashing is a reversible encoding that cannot hide a PAN, while encryption is a one-way digest that stores a fixed-length fingerprint of the original data
- B.Hashing is a symmetric process that cannot use a salt, while encryption is an asymmetric process where one public key decrypts the stored data later
- C.Hashing is a transport protocol that cannot protect stored PANs, while encryption is a storage format where keys are derived from the card number
- D.Hashing is a one-way process that cannot be reversed, while encryption is a two-way process where data can be decrypted back to its original form
Why D is correct
Hashing is irreversible (one-way), producing a fixed-length output. Encryption is reversible (two-way), allowing recovery of the original data with the correct key.
Know someone studying for PCI DSS? Send them this one.