3
$\begingroup$

What is the ASN.1 OID associated to bcrypt (the key derivation scheme)?

For instance, PBKDF2 has 1.2.840.113549.1.5.12 and it is therefore possible to store a private key in a PKCS#8 structure, encrypted with a password. Is that possible with bcrypt?

|improve this question
$\endgroup$
3
$\begingroup$

According to http://www.oid-info.com/ bcrypt has no official OID. You could register a private enterprise number with IANA and assign your own OID for your purpose. But that's going to make interaction with 3rd party application more complicated.

Or you could use PBKDF2 instead of bcrypt. PBKDF2 is a public-key cryptography standards. Libraries such as OpenSSL implement PKCS #5 and therefore provide HMAC-based PBKDF2. The algorithm provides about the same amount of security as bcrypt.

|improve this answer
$\endgroup$
  • 1
    $\begingroup$ OpenSS $\mapsto$ OpenSSL $\:$ ? $\;\;\;$ $\endgroup$ – user991 Sep 1 '13 at 2:23
  • 1
    $\begingroup$ Yes, OpenSSL. Thanks for the hint. I have fixed my typo. $\endgroup$ – Christian Heimes Sep 2 '13 at 20:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.