CCI-004062

For password-based authentication, store passwords using an approved salted key derivation function, preferably using a keyed hash.