Questions tagged [pbkdf2]
PBKDF2 is a key derivation and strengthening function, commonly used for password storage.
28
questions
37
votes
8
answers
14k
views
Client side password hashing
Edit: Updated to put more emphasis on the goal - peace of mind for the user, and not beefing up the security.
After reading through a few discussions here about client side hashing of passwords, I'm ...
221
votes
4
answers
90k
views
Recommended # of iterations when using PBKDF2-SHA256?
I'm curious if anyone has any advice or points of reference when it comes to determining how many iterations is 'good enough' when using PBKDF2 (specifically with SHA-256). Certainly, 'good enough' is ...
46
votes
2
answers
9k
views
Are there more modern password hashing methods than bcrypt and scrypt?
This question made me start thinking about password hashing again. I currently use bcrypt (specifically py-bcrypt). I've heard a lot about PBKDF2, and scrypt.
What I'm wondering is if there are any "...
97
votes
3
answers
83k
views
What's the advantage of using PBKDF2 vs SHA256 to generate an AES encryption key from a passphrase?
I'm looking at two comparable pieces of software which encrypt data on disk using a passphrase. One uses PBKDF2 to generate the encryption key from a passphrase, while the other uses two rounds of ...
30
votes
3
answers
22k
views
With PBKDF2, what is an optimal Hash size in bytes? What about the size of the salt?
When creating a hash with PBKDF2, it allows the developer to choose the size of the hash. Is longer always better? Also, what about the size of the random salt? Should that be the same size as the ...
14
votes
4
answers
7k
views
Challenging challenge: client-side password hashing and server-side password verification
We have a website where users need to log in to access privileged information. Obviously we are using SSL, but I also want to avoid plaintext passwords from accidently ending up in server logs, or ...
33
votes
5
answers
4k
views
Is it possible to increase the cost of BCrypt or PBKDF2 when its already calculated and without the original password?
I just wanted to know if you can increase the cost (iterations) of those two algorithms off-line.
I want to increase the cost every year of my users passwords.
One solution is to recalculate them when ...
20
votes
4
answers
5k
views
At what point does adding more iterations to PBKDF2 provide no extra security?
If my true passphrase is used only to generate a hash which is used as the cipher's actual key, doesn't that mean it's possible to try and brute force the cipher itself? I know it would take an ...
9
votes
1
answer
1k
views
Would it make sense to use Bcrypt and PBKDF2 together?
I've read various opinions about whether Bcrypt or PDBKF2 is a better key derivation hashing method. The answer seems to depend on a lot of complicated factors that are not easy to analyze. Would ...
7
votes
2
answers
13k
views
Best reasonable way to store a secret safely
I'm working on a software that need to store and use secrets.
These secrets can be for example:
a password to connect to a database
a client secret for an OAuth 2.0 client_credentials grant.
I need ...
10
votes
2
answers
7k
views
How to know which output length to request from PBKDF2?
I feel like I'm asking a fairly obvious question here, but with it being so easy to make mistakes in this space, here goes.
From wikipedia:
DK = PBKDF2(PRF, Password, Salt, c, dkLen)
dkLen is the ...
10
votes
2
answers
1k
views
Is there any recommended approach for "upgrading" MD5 hashes to something secure? [duplicate]
I'm currently dealing with a couple of user accounts containing MD5 hashed passwords. These accounts got migrated from an old system into our current system which uses PBKDF2 for password hashing. I ...
2
votes
1
answer
1k
views
Password based Asymmetric Key generation
I am looking for a password based key derivation scheme that results in an asymmetric key pair. I have worked with PBKDF and its variants but could not come up with any way of generating a key pair. I ...
10
votes
2
answers
2k
views
Verify Login and Encrypt with PBKDF2
I'm writing a desktop application where I'm using PBKDF2 to generate an encryption key to AES-128 encrypt the config file. The config file contains a crypo-random key that's been used to encrypt the ...
10
votes
3
answers
10k
views
Does NIST really recommend PBKDF2 for password hashing?
We hesitated between BCrypt and PBKDF2 for password hashing. In many forums and blogs people say something like "In their Special Publication SP 800-132 NIST basically recommends using PBKDF2 for ...
11
votes
3
answers
2k
views
How should I choose a difficulty factor for my password hashing function?
Assuming that I'm doing password hashing properly and using bcrypt, scrypt or PBKDF2, how should I go about choosing an appropriate difficulty factor? i.e rounds for bcrypt, iterations for PBKDF2 and ...
6
votes
2
answers
1k
views
How less secure is an encryption if we know something about the original data?
I have a number of files encrypted with a key derived from a password. In line with standard practice, I use a random salt and password and do many PBKDF2 iterations to obtain an encryption key and IV....
12
votes
3
answers
9k
views
Parameters for PBKDF2 for password hashing
I use PBKDF2 with SHA-256 to store hashes of passwords. I use the following parameters:
number of iterations desired = 1024
length of the salt in bytes = 16
length of the derived key ...
8
votes
1
answer
795
views
LastPass's use of client-side Salt
The LastPass Team states the following in their FAQ:
Do you use a salted hash for logging in?
Yes, we first do a 'salt' of your LastPass password with your username on the client side (on
...
3
votes
3
answers
762
views
Client-Side Hashing to decrease value of password guessing heuristics
Yes, this is 'yet another client-side hashing' question. But, don't leave yet, I think there is some value here.
I'd like to do something to mitigate the affect on the community as a whole when my ...
3
votes
2
answers
2k
views
Why use PBKDF2 over multiple iterations of a another cryptographic hash function?
People often recommend PBKDF2 over using hash functions directly, but typically they compare PBKDF2 to a single unsalted hash. What advatages are there to using PBKDF2 over multiple iterations of a ...
9
votes
3
answers
1k
views
Increase the security of an already stored password hash
Right now we're using 1024 byte PBKDF2 with 256 byte user-specific salt and variable iterations. However, I would much prefer to be able to, perhaps once every year or two, to be able to flat out ...
4
votes
3
answers
5k
views
Why is there a Cap on Password length? [duplicate]
Why when we sign up on sites like Facebook and Gmail do our passwords have to be 8-12 characters in length, or some other cap? 8-12 spaces are finite, but you can make your passwords more "secure" by ...
2
votes
2
answers
554
views
Is this use of PBKDF2 for generating passwords secure?
Reading Security Engineering by Ross Anderson, chapter 2.4.7.1 Password Manglers got an idea that finally seems to solve the issue I have with the existing 'I need to remember a strong* password for ...
8
votes
6
answers
13k
views
Is there a table that compares hashing algorithms by speed, relatively (machine independent)
As far as I understood*, one of the major criteria when choosing a password / salt hashing algorithm is it's speed. To prevent brute force attacks, a slower algorithm is better (and also makes it more ...
3
votes
2
answers
336
views
Web Service Authentication Using PBKDF2 and a Public Salt - Does the salt need to change on every request?
I have implemented PBKDF2 authentication for some web services.
The client is given the following information, so they can duplicate the PBKDF2 function:
the hashing algorithm (SHA256)
a secret ...
2
votes
3
answers
2k
views
PBKDF2 used to generate an encryption key: long shared secret (password) vs iterations count
I want to use pbkdf2 to generate a key for a symetric encryption (DES, 3DES, may be AES) algorith, that will be used to secure private data between an AS/400 and another computer (probably running ...
1
vote
1
answer
499
views
PBKDF2 constants
I recently found this PBKDF2 code:
<?php
/*
* Password Hashing With PBKDF2 (http://crackstation.net/hashing-security.htm).
* Copyright (c) 2013, Taylor Hornby
* All rights reserved.
*
* ...