Western Governors University (WGU) ITAS 2142 D830 Introduction to Cryptography Practice Exam

Password verification hinges on hashing with a salt, not on handling the actual password. When a password is created, the system stores a hash of the password combined with a unique salt. Later, the user enters the password; the system applies the same salt and hashing process to that input and compares the new hash to the stored one. If they match, the password is correct without ever exposing the original password. The salt ensures that even identical passwords produce different hashes, protecting against rainbow tables and precomputed attacks. Storing plaintext passwords is insecure, encrypting with AES would imply decrypting to verify, and sending the password in plaintext over the network would expose it to interception.