Encryption and Hashing for Data Security
Key Takeaways
Subdomain 5.1 names encryption as symmetric, asymmetric, hashing, and quantum resistant cryptography.
Encryption protects confidentiality; hashing supports integrity checks.
Quantum resistant cryptography is named in the outline as a category; the outline does not require its algorithms.
Source: ISC2 CC Exam Outline effective September 1, 2026, subdomains 1.1 and 5.1, checked 2026-10-22.
The Encryption Types
Subdomain 5.1, Understand data security, names encryption in four forms: symmetric, asymmetric, hashing, and quantum resistant cryptography. Symmetric encryption uses one shared key. Asymmetric encryption uses a key pair. Hashing produces a fixed-length value that changes if the input changes.
Source: ISC2 CC Exam Outline effective September 1, 2026 (v01/2026), subdomain 5.1, https://www.isc2.org/certifications/cc/cc-certification-exam-outline, checked 2026-10-22.
Matching a Type to the Goal
Subdomain 1.1 names confidentiality and integrity. Encryption supports confidentiality, because only holders of the key can read the data. Hashing supports integrity, because a changed value reveals a change. Quantum resistant cryptography is a category the outline names for the future; a scenario about it should be answered at the category level.
What the Outline Lists for This Section
The outline names these items. Be able to explain each one in plain language and apply it to a short scenario:
- 5.1: Data handling (e.g., classification, labeling, masking, and sanitization)
- 5.1: Encryption (e.g., symmetric, asymmetric, hashing, quantum resistant cryptography)
Common Traps
A common trap is using the wrong handling step. Classify and label first; sanitization removes data for disposal or reuse, while masking hides values that remain in use.
Which type of cryptography is hashing, in the outline's terms?
A cryptographic category that produces a fixed-length value for integrity checks
A way to share one secret key between two parties so that both can encrypt and decrypt
A key pair used for signing and encryption, with one public key and one private key
A method of deleting data permanently so that it cannot be recovered by any tool
Match each cryptography type to its description.
Match each item on the left with the correct item on the right
Symmetric
Asymmetric
Hashing
Match each cryptography type to the goal in the scenario. Do not assume one type solves all three objectives; encryption addresses confidentiality, and hashing addresses integrity checks.
Sections you finish are checked off in the contents.