What is Salting (password hashing)?
In short
Salting adds a random value to each password before it is hashed and stored, so identical passwords produce different hashes and precomputed tables of hashes are useless to attackers.
Key takeaways
- The salt is stored alongside the hash; it doesn't need to be secret.
- Password hashing should also use deliberately slow algorithms.
- Passwords should never be stored in plain text or with reversible encryption.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
To send a confidential message that only the intended recipient can read, which key should the sender use to encrypt it?