Which hashing algorithm is used in the hash_password function?

Which hashing algorithm is used in the hash_password function?

• A. SHA3-256
• B. SHA-256
• C. MD5
• D. SHA-1

Answer: (A)

The main idea here is using a modern, strong hash function to process a password. The hash_password function applies the SHA-3 family with a 256-bit output, known as SHA3-256. This family uses the Keccak-based construction, which provides robust security properties and avoids several weaknesses found in older algorithms. Compared with MD5 and SHA-1, SHA3-256 has no practical collision weaknesses that affect typical password use, and it differs from SHA-256 by its underlying design, offering strong resistance to certain attack vectors you’d worry about in raw hashing. The 256-bit digest length also gives ample entropy for password hashing within standard threat models. Remember, for real-world password storage you’d pair this with a salt and a slow derivation function, but the algorithm chosen in the function is SHA3-256.

The main idea here is using a modern, strong hash function to process a password. The hash_password function applies the SHA-3 family with a 256-bit output, known as SHA3-256. This family uses the Keccak-based construction, which provides robust security properties and avoids several weaknesses found in older algorithms. Compared with MD5 and SHA-1, SHA3-256 has no practical collision weaknesses that affect typical password use, and it differs from SHA-256 by its underlying design, offering strong resistance to certain attack vectors you’d worry about in raw hashing. The 256-bit digest length also gives ample entropy for password hashing within standard threat models. Remember, for real-world password storage you’d pair this with a salt and a slow derivation function, but the algorithm chosen in the function is SHA3-256.