Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It only takes a minute to sign up.
Sign up to join this community
My question is would it make any difference if I hash a block of data and then encrypt it using RSA is most secure to do the reverse?
The question is about Site-To-Site transmission where the recipient needs to decrypt the incoming data.
What method is more secure and make it harder to decrypt: Hash-Then-Encrypt or Encrypt-the-Hash?
Hash-Then-Encrypt or Encrypt-the-Hash?
Traditionally this means in (a)symmetric encryption one of the following:
$$C=E_K(M\parallel H(M))$$ $$C'=E_K(M)\parallel H(C')$$ $$C''=E_K(M)\parallel H(M)$$
The first scheme is subtly insecure, as can be seen in this answer.
The second scheme blatently provides no extra authentication because an attacker can just go ahead and change the ciphertext and because the hash function is public, re-compute the hash value.
The third scheme is also insecure because it leaks information about $M$, in particular if you have a guess for what $M$ could be, you just compute $H(M)$ and check if it matches with the provided value.
From your comments it sounded like you instead meant the following two schemes:
$$C=E_K(H(M))$$ $$C'=H(E_K(M))$$
but note that neither scheme is actually functionally correct as an encryption scheme because given $H(M)$ it is in general hard and a lot of guesswork to recover $M$ and so the intended recipient can't actually decrypt the message, even with the key.
The question is about Sit-To-Site Transmission where the recipient needs to decrypt the incoming data.
As otus rightfully noticed in the comments what you want in this case is actually authenticated encryption where you, the sender, encrypt some piece of data, e.g. using AES-GCM and then the recipient uses knowledge of the same key you used to decrypt the data. You may also want to note that chances are you actually don't want to deal with AES-GCM itself yourself, but you probably want to have "simply" a secure transmission channel between your sites, which is exactly what Transport Layer Security (TLS) is designed to do. If you have a shared key at the two sites, you can easily use one of the PSK cipher suites for TLS and if not and you only have (authentic) public keys of the other site, you can use the more standard signature-based key exchanges.
