Multiple choice technology security

What is used as the salt value in the hash function available in the TCS SAPI?

  1. A constant value stored as plain text within a configuration file

  2. There is no salt added while calculating the hash value

  3. The accountName is used as the salt value

  4. The salt value is calculated from the password value

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

A salt is random data added to passwords before hashing to prevent rainbow table attacks. Using accountName as the salt ensures each user's hash is unique, even if passwords are identical. This approach makes pre-computed attacks infeasible while maintaining per-user uniqueness.