Salting for One-Way Hash Complexity | SY0-701
Short answer
D Salting involves adding a unique, random value to the input data before applying a one-way hash algorithm to ensure distinct outputs and prevent precomputed attacks.
Question
Key Takeaways
The exam tests your ability to distinguish between techniques that increase computational cost (key stretching) versus those that add unique input data (salting). The common trap is confusing these two password-hardening methods.
This question tests the specific cryptographic technique of adding random data to inputs before hashing. Salting is the correct answer because it directly addresses the need for extra complexity to defeat precomputed attacks.
Common mistake: Candidates often select Key Stretching, which involves iterative hashing to slow down attackers, rather than salting, which adds a random value to the input to ensure unique hashes.
Expert Analysis
Why the Answer Is Correct
Salting is the process of adding a unique, random string of data (the salt) to an input, such as a password, before applying a one-way hash function. This ensures that even if two users have identical passwords, their resulting hashes will be completely different due to the unique salt. This technique effectively neutralizes rainbow table attacks and makes brute-force attacks significantly more difficult.
Why the Other Options Are Wrong
Key stretching (Option A) refers to techniques like PBKDF2 or bcrypt that iterate the hashing process multiple times to increase computational cost, not necessarily adding 'extra complexity' in the form of unique input data. Data masking (Option B) is used to hide sensitive data formats without altering the underlying security mechanism, often for privacy compliance. Steganography (Option C) is the practice of hiding secret data within an innocuous file or message, unrelated to hash function inputs.
Community Comment Notes
The community consensus strongly supports Salting, with most learners noting its role in preventing rainbow table attacks. As user 'lauren2wright' explained, salting ensures "same input will produce different hash values." Another user, 'MAKOhunter33333333', clarified the distinction by stating key stretching makes the cracking process longer while salting adds unique characters to the password input.
Exam Strategy
When you see keywords like 'one-way transformation', 'hash', 'rainbow table', or 'unique output', immediately think of Salting. Remember that Salting changes the input, while Key Stretching changes the processing time.
Frequently Asked Questions
What is the difference between salting and key stretching?
Why isn't steganography the correct answer here?
Community Votes
100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 15 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 15
-
lauren2wright 👍 17D. Salting Salting involves adding random data to the input of a one-way hash function to ensure that the same input will produce different hash values, thus making it more difficult for attackers to use precomputed hash tables (rainbow tables) to reverse engineer the original input.
-
ermahasra 👍 4 Answered DD. Salting In the context of CompTIA Security+, salting is a technique used to enhance the security of stored passwords. It involves adding a random value, known as a "salt," to a password before hashing it. This process helps to prevent various types of attacks, such as rainbow table attacks and certain brute-force attacks.
-
MAKOhunter33333333 👍 4 Answered DKey stretching is used for weak keys, it will hash the pw, then hash that, then hash the hash of the hash and so forth. Makes the cracking process longer for the attacker Salting is adding random or unique extra character to the password so when cracked it is not the actual PW the attacker thinks
-
JackExam2025 👍 3 Answered DSalting is primarily used to ensure that even if two users have the same password, their hashes will differ due to the unique random salt added to each password before hashing. This helps prevent attacks like rainbow table attacks, where precomputed hash values are used to reverse the hash back to the original password.
-
Laraa 👍 2 Answered DSalting is a technique used to add extra complexity to data, such as passwords, before applying a one-way transformation algorithm like hashing. The salt is a random value that is combined with the input data (e.g., a password) to produce a unique output even if the input data is the same. This process prevents attacks such as rainbow table attacks and ensures that identical inputs do not result in identical hashes.
Show 10 more comments
-
[Removed] 👍 2 Answered DD. Salting Salting is used to add extra complexity before using a one-way data transformation algorithm, such as a hash function. Salting involves adding a unique, random value to the input data before it is processed by the hash function, making it more resistant to certain types of attacks like rainbow table attacks.
-
buzzor 👍 1salting is adding of random data to an existing hash to in order to increase the integrity of the hash by then performing a hash function producing hash values. it is used to prevent rainbow table attack (using precomputed hash tables).
-
SHAGZZ 👍 1 Answered Dsalting in simpler terms is adding a random character before performing the hash(one way function algorithm)
-
JRCHENRY 👍 1 Answered DSalting is used to add extra complexity before using a one-way data transformation algorithm.
-
way12 👍 1 Answered Csalting is used to enhance further security. salt is added to the input data before hashing
-
Hasss 👍 1 Answered CThe extra complexity added before a one-way data transformation algorithm is salting,
-
AryzBeats 👍 1 Answered DSalting is used to add complexity to the input of a one-way hash
-
23711ec 👍 1 Answered Dcorrect answer
-
oluabi.salami 👍 1 Answered DD. Salting
-
88d4601 👍 1 Answered CSalting
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →