Reputation
254
Top tag
Next privilege 350 Rep.
Access review queues
Badges
3 9
Impact
~8k people reached

  • 0 posts edited
  • 0 helpful flags
  • 13 votes cast
1d
awarded  Notable Question
2d
awarded  Notable Question
Dec
2
asked Repeating something encrypted and non-encrypted?
Jul
29
comment Is there a practical upper limit for password rehashing?
+1. Thanks.​​​​​​​​​​​​​​​​​​​​​​​​​
Jul
29
accepted Is there a practical upper limit for password rehashing?
Jul
9
asked Is there a practical upper limit for password rehashing?
Jul
2
awarded  Curious
May
22
awarded  Popular Question
May
4
awarded  Popular Question
Jan
30
awarded  Yearling
Jan
30
comment Best way to get 32 bytes from PBKDF2
Thanks. I understand the need for the final output to be a single output so that my second option is not so good. But why did you add the salt in the last step? Wouldn't $SHA256(tmp)$ be just as good?
Jan
30
asked How is HKDF-Expand better than a simple hash?
Jan
30
comment Derive both MAC and AES keys from same PBKDF2?
@CodesInChaos But anyway - as I wrote in my comments to my new question - now I don't understand why was HKDF-Expand invented at all (since one can simply use any hash). And also: You can convert your comments to answers, as they have been helpful and deserve upvotes. EDIT Thanks for the previous comment. I'll have to try that now.
Jan
30
comment Derive both MAC and AES keys from same PBKDF2?
@CodesInChaos Thanks. I just now finished writing my own using the specs and am looking for test vectors. But I only wrote the Expand so the test vectors that are available don't help me. Perhaps I'll write the Extract as well. It looks from your code like that's the simple part.
Jan
30
comment Best way to get 32 bytes from PBKDF2
@CodesInChaos Making sure I understand you correctly: your suggestion of using PBKDF2 twice means: feeding the 20 byte output as the "password" for the single iteration run (and reusing the original salt). Is that it? About your second suggestion of simply hashing the result: Now I'm really confused - if it's that simple (since we're not getting any more entropy than our password+salt anyway) - why did they invent HKDF-Expand at all?
Jan
30
comment Best way to get 32 bytes from PBKDF2
@CodesInChaos Thanks. You might as well turn these comments (and to my previous question) into answers so I can upvote them.
Jan
30
revised Best way to get 32 bytes from PBKDF2
edited body
Jan
30
revised Best way to get 32 bytes from PBKDF2
edited body
Jan
30
asked Best way to get 32 bytes from PBKDF2
Jan
29
comment Derive both MAC and AES keys from same PBKDF2?
@CodesInChaos I'm searching it now, but can't seem to find anything less technical than this (or just general descriptions like "is a simple HMAC-based KDF...".