|
Feb 14 |
comment |
PBKDF2 for key diversification what frightens me a little (and why I thought the simple AES scheme is ad-hoc) is that you need to do proper padding of the serial numbers. I've seen another variant using AES-CMAC, which also seems more reasonable to me. |
|
Feb 14 |
comment |
PBKDF2 for key diversification thank you very much for the long and informative answer. I have chosen the other one because a KBKDF is a perfect match for my scenario, and using a PBKDF or some ad-hoc scheme seems less appropriate. |