Reputation
Top tag
Next privilege 250 Rep.
View close votes
Badges
7
Impact
~1k people reached

  • 0 posts edited
  • 0 helpful flags
  • 2 votes cast
Feb
14
comment PBKDF2 for key diversification
what frightens me a little (and why I thought the simple AES scheme is ad-hoc) is that you need to do proper padding of the serial numbers. I've seen another variant using AES-CMAC, which also seems more reasonable to me.
Feb
14
comment PBKDF2 for key diversification
thank you very much for the long and informative answer. I have chosen the other one because a KBKDF is a perfect match for my scenario, and using a PBKDF or some ad-hoc scheme seems less appropriate.