The purpose of PBKDF2 is to create a derived key (DK) from a master password (PW) and a salt, often using a function like HMAC-SHA256. I have read that the salt should be as random as possible. But ...
Lets say that I am using 128 bit HMAC. How many operations are needed to find "non secure" message. Is birthday attack possible?