Password-Based Key Derivation Function

Table of contents

  1. Definition
  2. Key Point
  3. Reference
  4. Terminology
  5. Deep Dive

Definition

PBKDF1 and PBKDF2 (Password-Based Key Derivation Function 1 and 2) are key derivation functions with a sliding computational cost, used to reduce vulnerability to brute-force attacks. ‘Salt’ and ‘iteration count’ formed the backbone of password-based encryption in PKCS #5 v1.5 Thus, password-based key derivation is a function of a password, a salt, and an iteration count, where the latter two quantities need not be kept secret. The whole process to derive a key from a password is similar to the one of SHA2.

Key Point

  1. Combination of a password with a salt to produce a key.
  2. Include an iteration count in the key derivation technique.
  3. Secure Hash Algorithm (SHA)

Reference

Please refer to the listed reference below. That help you understand what is PBKDF#2.

Terminology

Deep Dive