easy5 pts · first answer countscloud-securityencryptionhashing

Hashing is not encryption

A developer says "we encrypt user passwords with SHA-256". What is wrong with this statement?

A.SHA-256 is reversible, so anyone with the key can read passwordsB.SHA-256 is an encryption algorithm only allowed for filesC.Nothing; SHA-256 is the recommended way to store passwordsD.SHA-256 is a one-way hash, and passwords need a slow salted hash

Discussion 0

Join free to post in the discussion.

Hashing is not encryption

Discussion 0

Related questions