A security engineer wants to introduce key stretching techniques to the account database to make password guessing attacks more difficult. Which of the following should be considered to achieve…

The correct answer is B. bcrypt F. PBKDF2. Key stretching is the technique of deliberately making a password hashing operation computationally expensive (slow), so brute-force and dictionary attacks become infeasible at scale. bcrypt (B) is a purpose-built adaptive password hashing algorithm with a configurable work…

Technical Integration of Enterprise Security

Question

A security engineer wants to introduce key stretching techniques to the account database to make password guessing attacks more difficult. Which of the following should be considered to achieve this? (Select TWO)

Options

ADigital signature
Bbcrypt
CPerfect forward secrecy
DSHA-256
EP-384
FPBKDF2
GRecord-level encryption

How the community answered

(17 responses)

A
6% (1)
B
94% (16)

Explanation

Key stretching is the technique of deliberately making a password hashing operation computationally expensive (slow), so brute-force and dictionary attacks become infeasible at scale. bcrypt (B) is a purpose-built adaptive password hashing algorithm with a configurable work factor that increases cost over time as hardware improves. PBKDF2 (F) (Password-Based Key Derivation Function 2) applies a pseudorandom function (typically HMAC-SHA) thousands or millions of times iteratively, directly implementing key stretching. SHA-256 (D) is a fast, general-purpose cryptographic hash not designed for password storage - its speed is a liability here. Digital signatures (A), Perfect Forward Secrecy (C), and P-384 (E) are unrelated to password hashing. Record-level encryption (G) encrypts stored data but does not stretch keys used for password verification.

Topics

#key stretching#bcrypt#PBKDF2#password hashing

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice