This question already has an answer here:

It seems to me that anything that was sufficiently good as a KDF would work just fine as a password hash, though the reverse might not be true. Are there considerations specific to password-hashing that don't apply to KDFs?

To clarify: This is about key-stretching KDFs. Not the kind for diversifying keys (eg. HKDF)


merged by Maarten Bodewes May 26 at 15:43

This question was merged with Key Derivation Functions vs. Password Hashing Schemes because it is an exact duplicate of that question.

Browse other questions tagged or ask your own question.