Study. uk . com
  1. Home
  2. All questions
  3. Question 264

CompTIA Security+ study material · question 264 of 611

What is the minimum salt length NIST specifies for stored passwords, and what does the salt achieve?

  1. 32 bits; it ensures two accounts with the same password do not share a hash
  2. 64 bits; it replaces the need for a cost factor
  3. 16 bits; it slows the hash function
  4. 128 bits; it encrypts the stored hash
Show the answer

Answer: A. 32 bits; it ensures two accounts with the same password do not share a hash

A unique salt of at least 32 bits also prevents precomputed tables being reused across accounts.

Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 § 3.1.1.2

Challenge yourself on this topic → Study as cards