Study. uk . com
  1. Home
  2. All questions
  3. Question 531

CompTIA Security+ study material · question 531 of 611

Why is hashing rather than encryption the right tool for storing passwords?

  1. Hashing does not require key management
  2. Hashing is one-way, so an attacker who obtains it cannot recover the password
  3. Hashing produces a shorter value
  4. Hashing is faster than encryption
Show the answer

Answer: B. Hashing is one-way, so an attacker who obtains it cannot recover the password

Encryption is reversible, so anyone with the key recovers the plaintext. Verification never needs the original back.

Source: OWASP Password Storage Cheat Sheet (OWASP) — OWASP Password Storage Cheat Sheet › Hashing vs Encryption

Challenge yourself on this topic → Study as cards