The password vault that protects shared municipal admin secrets uses key stretching with a strong algorithm and adequate key length. What is the primary security benefit of key stretching in this context?
Select an answer to reveal the explanation.
Short Explanation
Key stretching is like making a thief do a thousand push-ups for every password guess—each try costs more CPU time. Pair that with a solid algorithm and enough key length, and offline cracking gets painfully slow.
Full Explanation
Key stretching functions deliberately increase the time and resources needed to test password guesses when deriving cryptographic keys, which hardens offline brute-force attacks against password-based vaults. Stretching complements—rather than replaces—sound algorithm and key-length choices. It does not make passwords reversible for recovery and is unrelated to operating a public certificate authority.