pbkdf2 Questions

6

After the linkedin password hash leak, I've been looking at our password hashing. We using Django 1.4 which uses PBKDF2, which is great and a step up from the previous SHA1. However I'm curious ho...
Fussell asked 2/7, 2012 at 17:15

4

Solved

UPDATED 2019: Bouncycastle now support PBKDF2-HMAC-SHA256 since bouncycastle 1.60 Is there any reliable implementation of PBKDF2-HMAC-SHA256 for JAVA? I used to encrypt using bouncycastle but i...
Technical asked 22/3, 2014 at 17:13

3

Solved

Long story short have a membership system built in .NET that we are porting to WordPress and need to replicate the PBKDF2 encryption so users don't need to reset their passwords. Using a know hash...
Analyzer asked 9/9, 2016 at 1:31

0

The below swift code works to decrypt encrypted values from my encrypters on Dart, Android and Javascript. The problem is that that the key derivation takes way too long (~15-20 seconds). This uses...
Salver asked 26/8, 2021 at 2:58

5

Solved

I have to translate this Python code to NodeJS: from passlib.hash import pbkdf2_sha256 pbkdf2_sha256.verify('12345678', '$pbkdf2-sha256$2000$8R7jHOOcs7YWImRM6V1LqQ$CIdNv8YlLlCZfeFJihZs7eQxBsauvVfV...
Lite asked 31/7, 2018 at 13:0

4

Solved

There are test vectors for PBKDF2-HMAC-SHA1 in RFC6070. There are test vectors for HMAC-SHA2 in RFC4231. But so far I haven't found test vectors for PBKDF2-HMAC-SHA2 anywhere. I'm most interested i...
Ecru asked 26/2, 2011 at 23:48

4

Solved

I have a database from django and I want to work with it from Node.js. I have a task: authenticate users. Known from database: algorithm pbkdf2_sha256, salt, 10000 iterations and base64-encoded has...
Taryn asked 9/7, 2013 at 9:21

1

Solved

I encrypted a file with this command: openssl enc -aes-192-cbc -e -pbkdf2 -in <infile> -out <outfile> -pass pass: <password> Now I'm trying to do decrypt it in c and to take adv...
Keir asked 12/11, 2019 at 17:30

3

Solved

I'm trying to securely store a password in a database and for that I chose to store its hash generated using the PBKDF2 function. I want to do this using the bouncy castle library but I don't know ...
Salesperson asked 29/12, 2011 at 22:2

2

Solved

I've been given the task of creating a Login API for our project and I'm supposed to use PBKDF2 with HMACSHA256 as the PRF. The plain text password is hashed using MD5 and then fed into the PBKDF2 ...
Ambition asked 5/2, 2012 at 6:46

1

Solved

I have seen other questions which ask about creating the initialization vector (IV) for encryption and it seems using a random value is one option. However, I need to generate the IV for decryption...
Consecrate asked 28/2, 2018 at 2:45

1

Solved

I'm developing an encryption utility class to be reused for common operations. A very common case is to encrypt a plaintext with a user-provided password. In this case, I'm using PBKDF2 to derive ...
Hollands asked 9/2, 2018 at 16:2

2

Solved

It seems that I have a thread-safety issue with Cipher and/or PBEKeySpec. JDK : 1.8.0_102, 1.8.0_151 and 9.0.1+11 PBKDF2 algorithm: PBKDF2WithHmacSHA1 Cipher algorithm: AES/CFB/NoPadding Key algo...
Phaeton asked 27/10, 2017 at 9:27

1

How can the PBKDF2 function be done in PostgreSQL? There does not appear to be a native implementation.
Dudgeon asked 7/11, 2017 at 15:56

2

Solved

What is the $key_length in PBKDF2 It says that it will be derived from the input, but I see people using key_lengths of 256 and greater, but when I enter 256 as a key_length the output is 512 char...
Denudation asked 7/10, 2012 at 2:56

4

I'm trying to understand some C#-code, I have been handed, which deals with cryptography, and specifically uses PasswordDeriveBytes from System.Security.Cryptography. In the .NET docs , it says th...
Inner asked 17/8, 2011 at 12:42

1

Solved

I'm building an application in which a password is used on the client side to encrypt a private key of a elliptic curve key pair. Then the password is bcrypted and sent to the server (along with th...
Parakeet asked 12/11, 2016 at 19:49

2

Solved

I have a database of legacy passwords that were salted and hashed using MD5. I would like to update the system so that the data is more secure. The first option is to transition the users to a new...
Haemostat asked 2/4, 2013 at 21:8

1

Solved

I'm just learning about securing password while developing using MySQL and Python, following this tutorial. It's my understanding that the userpassword is stored at the database hashed, and the sa...
Excited asked 22/9, 2016 at 19:10

2

I am using OpenSSl in DevC. I was having a problem programming the PBKDF. A person suggested that I use the default function called PKCS5_PBKDF2_HMAC . I have visited many links online but cannot g...
Dunnage asked 13/2, 2016 at 15:1

2

I'm looking for a straightforward, secure, solution for storing a user's password using Node. I'm a cryptography novice, but have been trying to piece a solution together from researching online. I...
Musa asked 22/10, 2014 at 23:45

1

Solved

In an application in node.js, I am using crypto module for symmetric encryption/decryption. I am using AES-256-CTR. I originally assumed the crypto.createCipher will be "just working" and "handwav...
Jourdain asked 27/11, 2015 at 19:18

1

Solved

This is my java code. Now I want to implement same functionality in Objective-C. int dkLen = 16; int rounds = 1000; PBEKeySpec keySpec = new PBEKeySpec(hashKey.toCharArray(),salt.getBytes(), round...
Parfitt asked 24/10, 2015 at 6:30

1

Solved

I'm working with PBKDF2 on frontend (CryptoJS) and backend (Node.js), both the derived key must be equal so, I use the same salt, same algo, same number of iteration, same password, but the derive...
Commemorate asked 29/9, 2015 at 13:57

1

Solved

So I'm trying to use PBKDF2 to derive a key given a base64 string of 256 bits. I am able to use C#'s Rfc2898DeriveBytes and node-crypto's pbkdf2 to derive the same key, however, I can't say the sam...
Valverde asked 2/12, 2014 at 7:58

© 2022 - 2024 — McMap. All rights reserved.