Hashing Quiz: Can You Master SHA-256, Bcrypt & Salting?

1. What is a collision in the context of cryptographic hashing?

When two different inputs produce the same hash output

When a hash output exceeds the input size

When a salt value is reused

When multiple algorithms are used together

2. True or False: Hashing is suitable for encrypting sensitive data that needs to be decrypted later.

True

False

3. What is the main advantage of using a work factor or cost factor in bcrypt?

It reduces the hash size

It increases computation time, making brute-force attacks slower

It eliminates the need for salt

It speeds up password verification

4. Which attack exploits precomputed hashes of common passwords to crack user accounts?

Brute force attack

Dictionary attack

Rainbow table attack

Timing attack

5. True or False: The same salt should be used for multiple users' passwords to reduce storage space.

True

False

6. Why is bcrypt preferred over simple SHA-256 for password storage?

SHA-256 is faster and bcrypt is slower, making bcrypt better for passwords

Bcrypt includes adaptive cost factors and automatic salt handling

SHA-256 produces smaller output

Bcrypt is easier to implement

7. A hash function that is deterministic means what?

The same input always produces the same output

The output is always shorter than the input

The process cannot be reversed

The salt must be random

8. What does PBKDF2 accomplish in password hashing?

Applies a hash function multiple times to slow down attacks

Encrypts the salt value

Compresses the password before hashing

Generates a public-private key pair

9. Which of the following best describes the relationship between hashing and salting in password security?

Salting replaces hashing as the primary security method

Hashing converts passwords while salting adds uniqueness to prevent precomputed attacks

Salting is only used for encryption, not hashing

They are the same process with different names

10. True or False: Hashing is a reversible process that can be decrypted with the correct key.

True

False

11. What is the primary purpose of adding a salt to a password hash?

To increase the hash output size

To prevent rainbow table attacks and ensure identical passwords hash differently

To make the hashing algorithm faster

To reduce storage requirements for password databases

12. Which hashing algorithm is part of the SHA-2 family and commonly used in security applications?

SHA-1

SHA-256

MD5

RIPEMD-160

13. How should salts be generated for password hashing?

Use a predictable pattern like sequential numbers

Use the same salt for all passwords

Generate a unique random salt for each password

Derive the salt from the username

14. What property ensures that even a tiny change in input produces a completely different hash output?

Collision resistance

Avalanche effect

Determinism

Reversibility

15. True or False: MD5 is recommended for password hashing in modern security applications.

True

False

16. Which of the following is a cryptographic hash function suitable for data integrity verification?

Base64

SHA-256

ROT-13

Substitution cipher

17. What does bcrypt use to automatically handle salt generation and storage?

A fixed salt embedded in the algorithm

The username as a salt

An adaptive cost factor and built-in salt rounds

A server-side salt database

18. A rainbow table attack is most effective against passwords that lack what security component?

Encryption

Salt

Hashing

Compression

19. Which hashing algorithm is specifically designed for password storage and resistant to brute-force attacks?

MD5

SHA-1

Bcrypt

CRC-32

20. SHA-256 produces a hash output of how many bits?

128 bits

192 bits

256 bits

512 bits

Hashing Quiz: Can You Master SHA-256, bcrypt & Salting?

1. What is a collision in the context of cryptographic hashing?

2.

What first name or nickname would you like us to use?

2. True or False: Hashing is suitable for encrypting sensitive data that needs to be decrypted later.

3. What is the main advantage of using a work factor or cost factor in bcrypt?

4. Which attack exploits precomputed hashes of common passwords to crack user accounts?

5. True or False: The same salt should be used for multiple users' passwords to reduce storage space.

6. Why is bcrypt preferred over simple SHA-256 for password storage?

7. A hash function that is deterministic means what?

8. What does PBKDF2 accomplish in password hashing?

9. Which of the following best describes the relationship between hashing and salting in password security?

10. True or False: Hashing is a reversible process that can be decrypted with the correct key.

11. What is the primary purpose of adding a salt to a password hash?

12. Which hashing algorithm is part of the SHA-2 family and commonly used in security applications?

13. How should salts be generated for password hashing?

14. What property ensures that even a tiny change in input produces a completely different hash output?

15. True or False: MD5 is recommended for password hashing in modern security applications.

16. Which of the following is a cryptographic hash function suitable for data integrity verification?

17. What does bcrypt use to automatically handle salt generation and storage?

18. A rainbow table attack is most effective against passwords that lack what security component?

19. Which hashing algorithm is specifically designed for password storage and resistant to brute-force attacks?

20. SHA-256 produces a hash output of how many bits?