I am storing our customers' passwords with PBKDF2 and I would like to make these weak passwords more stronger (I don't want to restrict user to some very specific password length or special chars etc).
My idea is as follows:
- Take user (weak) password
- Generate random string ("salt") of defined size (cca 20 chars), encrypt it (we use Amazon KMS) and save with other user data
- Combine weak password with this random string (note1) - the final length will be size of random generated salt
- Generate hash with PBKDF2 from this "stronger" password string
Should this process make passwords more secure / stronger?
note1) How to generate this stronger - "password" it should be some sort of combining original password and random generated string. Some ideas? This algorithm must be deterministic.