During a web application penetration test, you discover a daily cron job that calls openssl enc -aes-256-cbc -salt -in db.dump -out db.dump.enc -pass file:/root/keyfile. The CISO wants the encryption changed so an offline attacker cannot easily brute-force the passphrase using modern GPUs. Which additional openssl enc option should you recommend be added to the command?
The -pbkdf2 switch tells OpenSSL to derive the encryption key with the PBKDF2 function instead of the legacy single-round MD5-based EVP_BytesToKey routine. PBKDF2 applies thousands of hash iterations, drastically slowing down dictionary and brute-force attacks on the passphrase. The -base64 flag only changes the output encoding, -md5 actually weakens the key-derivation process, and -nopad merely removes PKCS#7 padding-none of these increase resistance to GPU-accelerated cracking.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is PBKDF2 and why does it strengthen encryption?
Open an interactive chat with Bash
What is the difference between single-round MD5-based key derivation and PBKDF2?
Open an interactive chat with Bash
Why is `-base64`, `-md5`, or `-nopad` not as effective as `-pbkdf2` for preventing brute-force attacks?
Open an interactive chat with Bash
What is PBKDF2 and why is it better than MD5 for key derivation?
Open an interactive chat with Bash
How does GPU acceleration make brute-force attacks more effective?
Open an interactive chat with Bash
What is the purpose of the -salt option in the openssl command?
Open an interactive chat with Bash
Certified Ethical Hacker (CEH)
Cryptography
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .