19
$\begingroup$

It seems to me that anything that was sufficiently good as a KDF would work just fine as a password hash, though the reverse might not be true. Are there considerations specific to password-hashing that don't apply to KDFs?

To clarify: This is about key-stretching KDFs. Not the kind for diversifying keys (eg. HKDF)

|
$\endgroup$

Browse other questions tagged or ask your own question.