I'm new in the crypto world and I've just discovered
PBKDF (I used to use typed passeword as symmetric key).
When using some crypto mode, you're required to generate an
IV which must be completely random and not predictable, the best length is the length of a block size.
PBKDF (and hashing functions in general) needs a
salt which must also be random, I don't know the best length for a salt.
I'm thinking that an
IV and a
salt seems to be exactly the same but with a different name, they're random and are made to avoid getting the same output for the same input(s).
So I wonder if it would be secured to generate an
IV, derive the password with this
salt, and use these to encrypt data?