I need to derive a key from a username and a password. These are the only two things I have access to. What I thought is using PBKDF2 with username as the salt and password as the master password.
Could someone help me evaluate / confirm this solution in terms of security?
Update: Since the salts are required to be unique, I have thought about using the following as a salt:
HASH(USERNAME) XOR SOME_GLOBAL_CONSTANT
What do you think of this updated salt value?