These two get confused constantly, and the confusion causes real mistakes, such as storing a password in base64 and believing it is safe. The difference is simple once you see it.
Each one is marked as you go, and the explanation arrives straight after, which is
the part worth reading.
4 questions, marked as you go.
Tasks
These need your own device. Run the command in Termux, then paste what it printed.
The marking looks at what the output means, so spacing, version numbers and
ordering do not matter. If you have not installed anything yet, the
lesson covers the setup.
Produce and read a digest
This writes a small file, then hashes it. One line comes back.
Run this in Termux
On your own device. Nothing on this page executes it. The command runs in
your terminal, and this box only reads what you paste back.
One line, two columns: a long string of characters, then the file name.
a 64 character hexadecimal digest comes first
the file name is reported alongside it
the commands actually ran
What a good answer looks like
One line, starting with sixty-four characters from 0 to 9 and a to f, then two spaces, then the file name. Sixty-four characters is thirty-two bytes written out in hex, which is what SHA-256 produces. This is what a download page gives you so you can check that a file arrived intact: hash what you received, and compare the string with the one published. If they match, nothing was corrupted or swapped on the way.
Marking your own work
Both halves of this are checked in your browser, with no server involved, so nothing
stops you from pasting output you did not run. The tasks are written so that the
easiest way to pass one is to actually do it and read the result, which is the whole
intention.