To protect passwords in the case when an attacker obtains the password database, _______ is used to prevent _________ of the passwords.

Question

BlackTom AI · Accepted Answer

Hashing is a one-way function: once a password is hashed, you cannot feasibly recover the original plaintext by "decrypting" the hash.

1) Relevant knowledge points and concepts
- Hashing: deterministic, one-way function that maps input to fixed-size output; not reversible. Common password hashes: bcrypt, Argon2, PBKDF2, scrypt.
- Encryption: reversible transformation using keys; ciphertext can be decrypted if the key is obtained.
- Password storage best practice: store salted, slow hashes so attackers cannot recover plaintexts even if database is leaked.
- Verification workflow: user supplies password, system hashes it and compares to stored hash.

2) Step-by-step reasoning process
- If an attacker obtains the password database, they typically obtain stored values (hashes or ciphertexts).
- If passwords are encrypted (not hashed), the attacker could decrypt them if they obtain the decryption key.
- If passwords are hashed, there is no decryption operation; attacker must perform guessing/brute-force (hash candidate and compare), which is mitigated by salts and slow hashing.
- Therefore, hashing is used to prevent decryption of passwords (i.e., to avoid having a reversible form attackers can decrypt).

3) Intermediate steps (storage and verification)
- Registration: P (plaintext password) -> H = hash(P + salt) -> store H, salt.
- Login: user enters P' -> compute H' = hash(P' + stored salt) -> compare H' to stored H; accept if equal.
- No decryption step exists because H does not contain a reversible ciphertext.

4) Why the correct answer is correct
- Hashing prevents attackers from decrypting stored values because hashes are not reversible; encryption would allow decryption if keys are compromised.

5) Why other options are incorrect
- "decryption, hashing": nonsense order; decryption does not protect against hashing.
- "encryption, hashing": encryption is reversible; it does not inherently prevent recovery if keys are compromised.
- "hashing, encryption": hashing does not prevent encryption; the phrase is reversed in meaning.

6) Conclusion
Hashing is used to prevent decryption of the passwords — matching the provided correct answer: "hashing, decryption."

To protect passwords in the case when an attacker obtains the password database, _ is used to prevent ___ of the passwords.单项选择题

类似问题

Scenario:Passwords are stored in a database as hashes. Even if the database is compromised, original passwords cannot be recovered. Question: Which cryptographic concept is applied?

When designing a secure system, why is hashing preferred over encryption for storing passwords?

An important technique to mitigate password dictionary attacks is to ___________.

__________ is a technique used to help protect against attacks exposing the contents of the server where password information is stored.

The best way to store passwords is:

A hash of data can be identified with attacks, so it is customary to add to a hash to ensure that the hash value appears to be different each time it is used.

A project has a required return of 12.6 percent, an initial cash outflow of $42,100, and cash inflows of $16,500 in Year 1, $11,700 in Year 2, and $10,400 in Year 4. What is the net present value?

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单

To protect passwords in the case when an attacker obtains the password database, _______ is used to prevent _________ of the passwords.单项选择题