- Home
- All questions
- Question 264
CompTIA Security+ study material · question 264 of 611
What is the minimum salt length NIST specifies for stored passwords, and what does the salt achieve?
Show the answer
Answer: A. 32 bits; it ensures two accounts with the same password do not share a hash
A unique salt of at least 32 bits also prevents precomputed tables being reused across accounts.
Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 § 3.1.1.2