A website stores the digest of passwords rather than the passwords themselves. Which property of the hash function guarantees that an attacker who has stolen the database cannot recover a password from its digest?