Study. uk . com
  1. Home
  2. All questions
  3. Question 534

CompTIA Security+ study material · question 534 of 611

Which password hashing algorithm does OWASP recommend first, and why?

  1. Argon2id, because it resists both GPU-based and side-channel attacks
  2. PBKDF2, because it has the highest iteration counts
  3. bcrypt, because it is widely supported in legacy systems
  4. SHA-512, because its output is longest
Show the answer

Answer: A. Argon2id, because it resists both GPU-based and side-channel attacks

Argon2id balances the two attack classes with memory, iteration and parallelism parameters that can be tuned.

Source: OWASP Password Storage Cheat Sheet (OWASP) — OWASP Password Storage Cheat Sheet › Argon2id

Challenge yourself on this topic → Study as cards