Hashing solutions

Unilateral data obfuscation and authentication

Hashing is a one-way data masking technique that converts a variable-length „message“ (e.g., someone's password) into a scrambled, fixed-length alphanumeric string. The message digest, or „hash value,“ can be an indexed lookup for the message. Sometimes there is more than one message per index (a „collision“).

Since hashing is not as strong as encryption or reliably reversible, it is sometimes only suitable for masking. More often, however, hashing is used in conjunction with encryption. IRI provides SHA1 and SHA2 hashing algorithms, as well as various Encryption features.

Hash functions are also used to generate checksums or Message Authentication Codes (MACs). These are created and sent along with messages such as emails, EFTs, or passwords. When the message is received, its content is put through the same hash function to create a new MAC. If the original and new MACs match, the message is authentic; if they do not, it is likely that the message has been altered and therefore compromised.

Use field-level hashing functions in IRI FieldShield in the IRI Data Privacy SuiteIRI CoSort in the IRI Data Management Suite or the IRI VoracityPlatform to mask PII. Or create a MAC for one or more column values in each row. Add the MACs as an additional field or provide them in a separate file. Use the MAC to ensure data in the record was undisturbed.

For more information and further use of hash values: See here.