Stack Overflow
Stack Overflow

Questions tagged [pbkdf2]

PBKDF2 (Password-Based Key Derivation Function 2) is a key derivation function that is part of RSA Laboratories' Public-Key Cryptography Standards (PKCS) series.

432 questions
4
votes
0 answers

Password derived key (i.e PBKDF2) + oAuth2

I have an application that needs to store secrets on behalf of the user. These secrets should be stored securely, but need to be decryptable when the user is present. Ordinarily I would turn to password based keys (i.e. PBKDF2) to derive the key,…
Eugene Burd
  • 41
  • 1
4
votes
3 answers

PBKDF2 using SHA 256 in .NET

I need to update some code that is using the PBKDF2 implementation in .Net, Rfc2898DeriveBytes to hash user credentials. It is my understanding that this function uses SHA-1 under the hood. I need to update the underlying hashing algorithm of the…
Dave
  • 2,829
  • 3
  • 17
  • 44
4
votes
3 answers

"Error: No callback provided to pbkdf2" when using async await

I want to write an async function for pbkdf2 password hash using crypto module in Nodejs. While the randomBytes function works fine, I get the following erroron running pbkdf2 with await: "Error: No callback provided to pbkdf2". I know a workaround…
Danial Khansari
  • 75
  • 8
4
votes
1 answer

Reusing PBKDF2 salt for AES/GCM as IV: dangerous?

I'm developing an encryption utility class to be reused for common operations. A very common case is to encrypt a plaintext with a user-provided password. In this case, I'm using PBKDF2 to derive a valid AES key, then use it in GCM mode to encrypt…
Michele Mariotti
  • 7,372
  • 5
  • 41
  • 73
4
votes
2 answers

How to implement sha-512 with Crypt::PBKDF2 in Perl?

So I'm looking to use SHA-512 with PBKDF2 to implement Bitcoin BIP-039. I have managed to work out that SHA-512 falls under SHA2 but when I specify that as the hashing function, even with 64 byte output, it still reports as using SHA-256. Am I…
Richard Thomas
  • 350
  • 1
  • 10
4
votes
1 answer

PBKDF2-HMAC-SHA256 Objective-C implementation

Can someone point me to an implementation of PBKDF2 using HMAC-SHA256 to generate a key, in Objective-C. This is part of the key generation process that I will later use for AES-CBC-Pad encryption. Thanks in advance
Shiun
  • 2,677
  • 1
  • 20
  • 20
4
votes
1 answer

Salt Length To Total Hash Length Ratio

I'm using KeyDerivation.Pbkdf2 to generate password hashes, and I was wondering what the general advice is regarding the salt length compared to the overall hash length that Pbkdf2 outputs. In the implementation below, I'm using HMACSHA512, and…
Steviebob
  • 1,705
  • 2
  • 23
  • 36
4
votes
1 answer

How can I convert plain text password into PBKDF2 algorithm format in Django?

I have list user information that I am pulling from some other database tool. The information in this tool is in plain text. I am using Django for my project and I need passowrd into $$$ format. Which library or…
user1637839
4
votes
2 answers

RAND_bytes doesn't give the same result from the same seed

I'm trying to program custom RSA key pair generation algorithm using OpenSSL. I've used the PKCS5_PBKDF2_HMAC_SHA1 function to generate PRNG seed, so, I've used this seed as RAND_seed input. Unfortunately every time I call RAND_bytes, with the same…
Crescenzo Mugione
  • 51
  • 1
  • 2
4
votes
1 answer

NodeJS pbkdf2Sync password hasing portability from v0.12.7 to v6.9.1

I have been working on porting an application written from node v0.12.7 to node v6.9.1. We are using MEAN stack with all of them upgraded to their latest versions. We have been able to upgrade everything except for one problem. We used pbkdf2Sync…
Vignesh T.V.
  • 1,790
  • 3
  • 27
  • 48
4
votes
1 answer

Password hashing using PBKDF2 and HKDF in .NET

I've been tasked with the task of writing a new method for computing password hashes to replace the old one which we do not feel is sufficiently secure yet. A good while ago, I read the book Security Driven .NET, in which I learned that the…
Alxandr
  • 12,345
  • 10
  • 59
  • 95
4
votes
0 answers

Why PBKDF2 SHA256 generated hash value not equal between C and java

I have a Android client and Server, the client needs to validate the session key before communication or processing data with the server. The client was Android app and its encryption method was wrote in Java, the server`s was wrote in C. I call the…
Logan Guo
  • 865
  • 4
  • 17
  • 35
4
votes
2 answers

How to use PBKDF2 in Oracle 12c?

We want to save user passwords in Oracle 12c. I found the dbms_crypto-Package but there was no information about PBKDF2. What's the current state in 2017 to use PBKDF2 in Oracle 12c?
tjati
  • 5,761
  • 4
  • 41
  • 56
4
votes
2 answers

Replicating Java password hashing code in Node.js (PBKDF2WithHmacSHA1)

Edit: my question has been updated, check the bottom of this post for the latest issue. I left the rest up for people who want to read the whole story :) I've been working on translating a small Java application into Node.js, which for the most part…
woubuc
  • 832
  • 2
  • 9
  • 11
4
votes
1 answer

Mismatch between ironclad and couch pbkdf2 hashing

My problem context: Fedora 22 64bit on Linode KVM instance, CouchDB v.1.6.1, SBCL 1.2.16 CouchDB: I create a user with password "testpass". The corresponding created document in _users database contains (among other stuff): { ... …
Paralife
  • 6,116
  • 8
  • 38
  • 64
1 2 3
…
28 29