Which technique adds a random string to a password before hashing?

Which technique adds a random string to a password before hashing?

• A. Rainbow tables
• B. Password Salting
• C. Password Hashing
• D. Brute Force

Answer: (B)

This technique uses a random value, called a salt, that is combined with the password before applying the hash function. The salt is typically unique for each password. By mixing the salt with the password, even identical passwords yield different hash outputs, so precomputed rainbow tables become ineffective because those tables would have to be created for every possible salt. The salt is stored with the resulting hash in the database so the system can verify future logins. Modern practice also employs strong hashing algorithms (like bcrypt, scrypt, or Argon2) that handle salting and add work factors to slow down attackers. Rainbow tables are precomputed hash lists used for cracking; password hashing is the general conversion process, not the specific randomizing step; brute force is an attack method, not a protective technique.

This technique uses a random value, called a salt, that is combined with the password before applying the hash function. The salt is typically unique for each password. By mixing the salt with the password, even identical passwords yield different hash outputs, so precomputed rainbow tables become ineffective because those tables would have to be created for every possible salt. The salt is stored with the resulting hash in the database so the system can verify future logins. Modern practice also employs strong hashing algorithms (like bcrypt, scrypt, or Argon2) that handle salting and add work factors to slow down attackers. Rainbow tables are precomputed hash lists used for cracking; password hashing is the general conversion process, not the specific randomizing step; brute force is an attack method, not a protective technique.