TK Study

Multiple choice › Hashing passwords

Hashing passwords

1. Hashing passwords

Why are passwords stored as salted hashes rather than encrypted with a key?

  1. Hashes can be decrypted by administrators when needed
  2. A hash cannot feasibly be reversed, and a unique salt stops identical passwords having identical hashes
  3. Hashing makes the passwords shorter so the database is smaller
  4. Salting is only done to make hashing faster
Answer

B

Hashing is one way, so stolen hashes do not directly reveal passwords. Salt defeats precomputed (rainbow table) attacks.