Skip to content
uencoder

PBKDF2-HMAC

PBKDF2-HMAC is the HMAC-based password key derivation function defined in PKCS#5, multiplying the cost of brute force through c iterations of HMAC.

Purpose

Derives encryption keys from passwords; the high iteration count makes brute force cost c times as much — the traditional standard for password storage and key derivation.

Mechanism

DK = T_1 || T_2 || ...,T_i = F(P, S || INT(i)),F(P, X) = U_1 XOR U_2 XOR ... XOR U_c,U_1=HMAC(P, X),U_j=HMAC(P, U_{j-1})。

Use cases

  • Password key derivation
  • Legacy password hashing
  • WPA/WPA2 PSK

Related tools

References