I'm using this codereview sample to encrypt data. I would like to provide hardware protected encryption and a user password as the key.
Is it acceptable to XOR the KDF Pkcs5S2 in Bouncy Castle with a device generated random key?
Is the resulting XOR key more secure than the KDF output?
*note the BouncyCastle PKCS5S2 implementation uses SHA1 as the HMAC calculation function if that matters.