Multiple choice technology security

What is used as the salt value in the hash function available in the TCS SAPI?

  1. A constant value stored as plain text within a configuration file

  2. There is no salt added while calculating the hash value

  3. The accountName is used as the salt value

  4. The salt value is calculated from the password value
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

The TCS SAPI hash function uses the accountName as the salt value to ensure unique hashes for each user even if they have the same password. Salting with accountName prevents pre-computed rainbow table attacks and ensures that two users with identical passwords have different hash values. Using a constant salt or no salt would make the hashes vulnerable to dictionary attacks.

Keep practicing — related questions