Hot answers tagged

4

If you are using the full HKDF each time, you could possibly save time by only using the Extract portion once and Expand once per derived key. That could even halve the total time taken, if you had a worst case situation. Another speedup possibility within HKDF is to use another hash. Either a faster hash or one that matches the required key length better. ...


1

Encrypting the salt is actually equivalent to just using the cipher as an initial step. That is, you could redefine the scheme as follows: tmp := D(hash(password), salt) password_hash = F(password, tmp) output := salt, password_hash Where D is the decryption function and F is the actual iterated password hash you defined. The addition of the cipher is ...



Only top voted, non community-wiki answers of a minimum length are eligible