nerdexam
CompTIA

CAS-002 · Question #323

During a software development project review, the cryptographic engineer advises the project manager that security can be greatly improved by significantly slowing down the runtime of a hashing…

The correct answer is D. Key stretching. Deliberately slowing a hashing algorithm and performing multiple iterations with a salt to increase computational cost and entropy is the definition of key stretching.

Enterprise Security

Question

During a software development project review, the cryptographic engineer advises the project manager that security can be greatly improved by significantly slowing down the runtime of a hashing algorithm and increasing the entropy by passing the input and salt back during each iteration. Which of the following BEST describes what the engineer is trying to achieve?

Options

  • AMonoalphabetic cipher
  • BConfusion
  • CRoot of trust
  • DKey stretching
  • EDiffusion

How the community answered

(27 responses)
  • A
    7% (2)
  • C
    4% (1)
  • D
    85% (23)
  • E
    4% (1)

Why each option

Deliberately slowing a hashing algorithm and performing multiple iterations with a salt to increase computational cost and entropy is the definition of key stretching.

AMonoalphabetic cipher

A monoalphabetic cipher is a classical substitution cipher that replaces each letter with another fixed letter, which is entirely unrelated to hashing or password storage.

BConfusion

Confusion is a cryptographic design principle that obscures the relationship between plaintext and ciphertext, typically achieved through substitution in block ciphers, not iterative hashing.

CRoot of trust

Root of trust refers to a trusted hardware or software component that serves as the foundation for a system's security chain, not a hashing technique.

DKey stretchingCorrect

Key stretching techniques such as PBKDF2, bcrypt, and scrypt increase the time and resources required to compute a hash by running the underlying algorithm through thousands or millions of iterations, each using the input and salt from the previous round. This dramatically raises the cost of brute-force and dictionary attacks because an attacker must repeat the full iteration chain for every candidate password. The added salt per iteration also increases entropy and prevents precomputed rainbow table attacks.

EDiffusion

Diffusion is a cryptographic principle that spreads the influence of a single plaintext bit across many ciphertext bits to obscure statistical patterns, which is a property of cipher design rather than iterative hashing.

Concept tested: Key stretching with iterative salted hashing

Source: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-passwordless

Topics

#key stretching#password hashing#PBKDF#cryptographic iteration

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice