The kdf tag has no wiki summary.
3
votes
1answer
78 views
Key collision in scrypt and hkdf
I am developing a mostly-offline authorization system that authorizes a user using an deterministically generated AuthKey derived from a MasterKey derived from a high-entropy chunk of data (128 bits) ...
1
vote
1answer
80 views
Why is Bcrypt called a Key Derivation Function?
I am trying to understand why is bcrypt called a Key Derivation Function?
I looked up the details of Ekfblowfish on Usenix article here:
...
0
votes
1answer
38 views
What information to include is the 'info' input for HKDF?
The RFC states the following:
3.2. The 'info' Input to HKDF
While the 'info' value is optional in the definition of HKDF, it is often of great importance in applications. Its main ...
0
votes
1answer
92 views
Scrypt as a KDF with one-time high-entropy input
I'm looking at using Scrypt as a KDF. Assume the following:
the input will always be high-entropy random bytes generated by a CSPRNG
the length of the input can vary from between 8 to 32 bytes
the ...
0
votes
1answer
82 views
brute force attack on KDF vs KEY
if we believe 256bit keys are secure in AES against any brute force attack, is that possible we use a KDF (convert user's weak entered password in truecrypt into a fixed AES key) with too much round ...
3
votes
2answers
148 views
Reason(s) for using a KDF for encryption keys
Assuming I already have a 256-key (32 char password) for AES encryption, comprised of random alpha-numeric characters and punctuation (95 possible ascii chars), generated by a decent PRNG, is there ...
1
vote
2answers
73 views
KDF with low-entropy salts
I need to derive a key from a username and a password. These are the only two things I have access to. What I thought is using PBKDF2 with username as the salt and password as the master password.
...
2
votes
2answers
197 views
Questions about Key Derivation Functions
My understanding is that a KDF is a function that takes a master secret and generates multiple keys. It is secure as long as the keys are "independent". If this is true, the following definition would ...
6
votes
1answer
280 views
Are there any authoritative definitions of “key stretching”?
This is mostly a terminology question, but I suppose that it is best asked and answered here. After browsing the Internet I have come across a fair number of completely different definitions of the ...
