What does a 'salt' do in password protection?

• A. It serves as a user identifier
• B. It adds randomness before password encryption
• C. It acts as a backup for lost passwords
• D. It tracks user login attempts

Answer: (B)

A 'salt' plays a crucial role in enhancing password protection by adding randomness before a password undergoes encryption. When a password is salted, a unique random value (the salt) is generated and combined with the password before it is hashed. This process ensures that even if two users have the same password, the resulting hashes will be different because of the unique salts applied.

This approach significantly mitigates the effectiveness of pre-computed hash attacks, such as rainbow table attacks, where attackers use previously calculated hashes to quickly crack passwords. By incorporating a salt, the hashing process becomes more complex and less predictable, increasing the security of stored passwords. This technique also complicates the efforts required for an attacker to crack multiple passwords at once, enhancing overall security in a system.