Study. uk . com
  1. Home
  2. All questions
  3. Question 554

CompTIA Security+ study material · question 554 of 611

What does key stretching achieve against an offline attacker?

  1. It lengthens the resulting hash output
  2. It prevents the hash file from being stolen
  3. It makes each guess cost real time and memory
  4. It removes the need for a salt
Show the answer

Answer: C. It makes each guess cost real time and memory

Deliberately slow derivation is what turns billions of cheap guesses into an economically infeasible campaign.

Source: OWASP Password Storage Cheat Sheet (OWASP) — OWASP Password Storage Cheat Sheet › Using Work Factors

Challenge yourself on this topic → Study as cards