I'm very curious to know this and a bit confuseconfuses too, Case1:suppose, I have two files encrypted using AES-128bit ( using same password, same salt but different Rfc2898DeriveBytes objects). If an attacker does brute force attack (imagining that he finishes this)
to crack the keys, I'm guessing he needs to run the attack once to get those 2 keys.
Case2:Now, If I encrypt the files using AES-128bit (using same password but different salts and different Rfc2898DeriveBytes objects), will it make the attacker run brute force twice? if the answer is yes, then why? changing the salt doesn't change the number of possible keys (2^128).
Suppose, I have two files encrypted using AES-128bit with keys PBKDF2-derived from the same password and the same salt. If an attacker does brute force attack (imagining that he finishes this) to crack the keys, I'm guessing he needs to run the attack once to get those 2 keys.
Now, if I encrypt the files using AES-128bit with keys PBKDF2-derived from the same password and a different salt, will it make the attacker run brute force twice? If the answer is yes, then why? Changing the salt doesn't change the number of possible keys $2^{128}$.
If the answer is no then, in both cases the number of possible keys are 2^128$2^{128}$. So, Whatwhat difference does it make if the salt is different?
