PrepAway - Latest Free Exam Questions & Answers

Which of the following are NOT acceptable ways to create a secure password hash in PHP?

Which of the following are NOT acceptable ways to create a secure password hash in PHP?
(Choose 2)

PrepAway - Latest Free Exam Questions & Answers

A.
password_hash()

B.
crypt()

C.
md5()

D.
hash_pbkdf2()

E.
openssl_digest()

Explanation:

One Comment on “Which of the following are NOT acceptable ways to create a secure password hash in PHP?

  1. ruslanbes says:

    Tricky.

    For those who wonder why openssl_digest() is NOT acceptable – it allows insecure hashing methods like MD5, MD4 and SHA without salt. The crypt() method is more secure since it will auto-generate salt.




    5



    0

Leave a Reply

Your email address will not be published. Required fields are marked *