Questions tagged [rfc2898]

RFC 2898 issued by the IETF in 2000 is about "PKCS #5: Password-Based Cryptography Specification Version 2.0" and is mainly a republication of PKCS #5 v2.0 from RSA Laboratories' Public-Key Cryptography Standards (PKCS) series

Abstract from official RFC file:

This memo represents a republication of PKCS #5 v2.0 from RSA Laboratories' Public-Key Cryptography Standards (PKCS) series, and change control is retained within the PKCS process. The body of this document, except for the security considerations section, is taken directly from that specification.

This document provides recommendations for the implementation of password-based cryptography, covering key derivation functions, encryption schemes, message-authentication schemes, and ASN.1 syntax identifying the techniques.

The recommendations are intended for general application within computer and communications systems, and as such include a fair amount of flexibility. They are particularly intended for the protection of sensitive information such as private keys, as in PKCS #8 [25]. It is expected that application standards and implementation profiles based on these specifications may include additional constraints.

Other cryptographic techniques based on passwords, such as password-based key entity authentication and key establishment protocols [4][5][26] are outside the scope of this document. Guidelines for the selection of passwords are also outside the scope.

33 questions
0
votes
1 answer

Password hashing different salt with same username

We introduced password encryption to our site. The salt is calculated as shown below: Rfc2898DeriveBytes hasher = new Rfc2898DeriveBytes(Username.ToLowerInvariant(), System.Text.Encoding.Default.GetBytes("Wn.,G38uI{~6y8G-FA4);UD~7u75%6"),…
Dominik G
  • 1,459
  • 3
  • 17
  • 37
-1
votes
1 answer

Translate from C# to Python | Rijndael, AES algorithms

I have code in C#, could you describe in words what is happening in the code? I tried to reproduce using this theme and this one aaand this one. But I didn't succeed. If you throw an example, it would be absolutely wonderful. public static…
Volkodaff
  • 105
  • 2
-1
votes
1 answer

How do I translate this C# encrypt function into Java?

I need to translate the below C# codes into Java, however, I could not find any Java equivalent to the Rfc2898DerivedBytes and Rijndael of C#. private static string Encrypt(string sData, string sEncryptionKey) { string str = null; string…
SUT
  • 384
  • 1
  • 7
  • 23
1 2
3