liveBook · Manning

One-way property

As explained in Software Security for Developers

The one-way property is the computational infeasibility of determining an input from a cryptographic hash function's output.

A cryptographic hash function has the one-way property when its output does not feasibly reveal the original input. This lets a fixed-size hash represent data without making the data recoverable from the hash alone. section 4.2.1

Keep the property distinct from related hash-function behavior:

  • Hashing is deterministic: the same input always produces the same output. section 4.2.1
  • One-wayness concerns recovering an input from its output; collision resistance concerns finding different inputs with the same output. section 4.2.1
  • Use standardized, peer-reviewed cryptographic hash functions rather than designing one. section 4.2.1
Figure 4.3 Think of the hash function as a blender: it takes inputs of different sizes and produces outputs of the same size. Different input values produce different output values. Attackers who access the hash value can’t determine anything about the input.
figure

The blender analogy illustrates how inputs of different sizes produce fixed-size outputs while remaining infeasible to recover from the hash. section 4.2.1

How Software Security for Developers covers it

How deep it goes
Defines one-wayness and contrasts it with collision resistance, but defers mathematical design and security proofs.
Examples
Uses SHA-256 outputs for a character, an uppercase variant, and a 2.6GB Ubuntu ISO file.
What you can do after
Evaluate hash-function choices by recognizing one-wayness, determinism, collision resistance, and peer-review requirements.
How it connects
Connects one-way property with cryptographic hash functions, collision resistance, SHA-256, and message integrity.

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Software Security for Developers. The section links point to the parts of the book it draws on.