Stack Overflow
Stack Overflow

Questions tagged [pbkdf2]

PBKDF2 (Password-Based Key Derivation Function 2) is a key derivation function that is part of RSA Laboratories' Public-Key Cryptography Standards (PKCS) series.

432 questions
3
votes
0 answers

Match/Compare two PBKDF2 hashed values

Below is my scenario. I have developed register(signup) and login feature for my website. UI is developed in AngularJS 2 and backed API are in Spring Boot with POstgreSQL as DB. While register, I accept two parameters (username and password), my…
Tejas Purohit
  • 31
  • 3
3
votes
3 answers

Python wpa_passphrase (linux binary) implementation generates only part of the psk

wpa_passphrase "testing" "testingpassword"network={ ssid="testing" #psk="testingpassword" psk=ae9400eac47807861c32f6b2d52434594fe1f1cbbd5ae0d89d5199ea5e4c79aa } I did a python script as this wikipedia article tells me how to compute wpa…
Guerlands
3
votes
1 answer

java hash from "PBKDF2WithHmacSHA512" is differs from python CRYPT(digest_alg='pbkdf2(1000,20,sha512)', salt=True)(password)[0])

I have a database with passwords that are hashed using the following python code: result = str(CRYPT(digest_alg='pbkdf2(1000,20,sha512)', salt=True)(password)[0]) (details can be found here) for password='123' it…
krtl
  • 193
  • 11
3
votes
1 answer

How to implement Scrypt in Java?

I have really been struggling trying to get Bouncy Castle Scrypt going in my web app for password encryption. I am fairly new to programming in Java and security. I have tried looking at Bouncy Castle's documentation for their Scrypt class. However,…
Perdue
  • 479
  • 9
  • 19
3
votes
2 answers

Verify Python Passlib generated PBKDF2 SHA512 Hash in .NET

I am migrating a platform which used Passlib 1.6.2 to generate password hashes. The code to encrypt the password is (hash is called with default value for rounds): from passlib.hash import pbkdf2_sha512 as pb def hash(cleartext, rounds=10001): …
JohnMark13
  • 3,709
  • 1
  • 15
  • 26
3
votes
1 answer

Using PBKDF2 in Java and PHP

I'm having some difficulty producing the same encrypted password using the PBKDF2 algorithm on both Java and PHP. I'm using the following Java implementation to generate the hash with a random byte array which is 16 bytes in size. I'm then storing…
Astronought
  • 405
  • 5
  • 24
3
votes
1 answer

Using openssl based pbkdf2 in a multithreaded app

I'm trying to use Jan-Piet Mens' pbkdf2 code from his mosquitto-auth-plug in a multithreaded app. It all works fine when I run the code in a single thread, but I start getting Invalid reads (using valgrind) for many of the internal free()s in the…
Zaxter
  • 2,939
  • 3
  • 31
  • 48
3
votes
1 answer

Verifying a PBKDF2 password hash in python-pbkdf2

I am using the snippet below to encrypt user password before saving in the database. from pbkdf2 import crypt pwhash = crypt(password_from_user) Example: $p5k2$$Y0qfZ64u$A/pYO.3Mt9HstUtEEhWH/RXBg16EXDMr Then, I save this in database. Well locally,…
Belvi Nosakhare
  • 3,107
  • 5
  • 32
  • 65
3
votes
1 answer

Using Jasypt for password based AES encryption with PBKDF2WithHmacSHA1 key

I'm implementing an encryption mechanism where I work, and the security guy's demands are as follows: Create a 256 bit key using PBKDF2WithHmacSHA512, secret password, 256bit salt and 20000 iterations minimum. Salt should be generated using…
Guy Marom
  • 166
  • 1
  • 9
3
votes
1 answer

PKCS5_PBKDF2_HMAC: binary password

I am going to use PKCS5_PBKDF2_HMAC to derive keys. Password argument is const char*. Does it mean it must consist of printable characters only? Can I use binary password instead? OpenSSL Documentation says nothing about it. The only clue is using…
olegst
  • 1,209
  • 1
  • 13
  • 33
3
votes
1 answer

Is this encryption method secure?

I developed an application in C++ using Crypto++ to encrypt information and store the file in the hard drive. I use an integrity string to check if the password entered by the user is correct. Can you please tell me if the implementation generates a…
Rive
  • 149
  • 1
  • 8
3
votes
1 answer

Salting and Hashing with PBKDF2

I am trying to learn cryptography with saving passwords in database with hashing and salting, so I decided to make a login-system trying implementing this system. My database consist of UserID int PK Username varchar(250) Salt varbinary(64)…
Sigils
  • 2,492
  • 8
  • 24
  • 36
3
votes
2 answers

Crypto - Express.js is PBKDF2 HMAC-SHA1 enough?

Using the Express.js framework and crypto to hash a password with pbkdf2 I read that the default algorithm is HMAC-SHA1 but i dont understand why it hasnt been upgraded to one of the other families or SHA. crypto.pbkdf2(password, salt, iterations,…
czioutas
  • 1,032
  • 2
  • 11
  • 37
3
votes
1 answer

Password Hashing in 2013

What is the "best" solution these today? This seems a good option: https://defuse.ca/php-pbkdf2.htm But then how about upgrading to PHP5.5 and using this? http://php.net/manual/en/function.hash-pbkdf2.php Curious as to why the PHP site…
James Drake
  • 143
  • 6
3
votes
1 answer

Speeding up Haskell PBKDF2 algorithm

I have written a new version of the PBKDF2 algorithm in Haskell. It passes almost all of the HMAC-SHA-1 test vectors listed in RFC 6070, but it is not very efficient. How can I improve the code? When I run it on the test vectors, the third case (see…
Ralph
  • 31,584
  • 38
  • 145
  • 282
1 2 3
…
28 29