Assertion: password's hash | /r/ObjectUse | used as shared secret
Facets:
Source sentences:
text: In addition, when the hash is used as a shared secret, an attacker does not need the original password to authenticate remotely; they only need the hash.