CompTIA Security+ (SY0-501) — Question 256

Which of the following are used to substantially increase the computation time required to crack a password? (Choose two.)

Answer options

• A. BCRYPT
• B. Substitution cipher
• C. ECDHE
• D. PBKDF2
• E. Diffie-Hellman

Correct answer: A, D

Explanation

BCRYPT and PBKDF2 are specifically designed to increase the time it takes to crack passwords by making the hashing process more resource-intensive. In contrast, a substitution cipher is a basic encryption method that does not inherently increase computational difficulty, while ECDHE and Diffie-Hellman are cryptographic protocols for key exchange and do not focus on password hashing.