In digital evidence handling, hash verification is used to

• A. Encrypting data for storage
• B. Confirming data integrity by comparing hash values
• C. Hiding the data from investigators
• D. Increasing data size

Answer: (B)

Hash verification in digital evidence is about ensuring data integrity by using a hash value as a digital fingerprint. A hash function turns the data into a fixed-size digest that uniquely reflects its contents. The crucial property is that any change to the data—even a single bit—produces a different hash, while the same input always yields the same hash. In practice, investigators compute and securely store the hash when evidence is first collected and later recompute the hash to compare with the original. If the hashes match, the data hasn’t been altered during storage or transfer; if they don’t, tampering or corruption has occurred. This process does not encrypt or hide data, nor does it change the data size or add information, which is why it’s used specifically to confirm data integrity by comparing hash values.