1
$\begingroup$

In a system were both sides have access to a common secret, and publicly exchange an iteration count and salt, can a PKCS#5 (Password-based Encryption Standard) algorithm be used to generate a key suitable for use as a session key to support AES encryption of a small stream (<1Mb) of data?

My question is: can both sides run the algorithm--given the "common secret", publicly available salt, and iteration count--and then generate the same key?

The intention is that a new session key would be generated via this process for each new connection.

New contributor
readysteadygo2006 is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.
$\endgroup$
1
$\begingroup$

Yes. PBKDF2, defined in PKCS#5, is deterministic; you can check its description.

$\endgroup$

Your Answer

readysteadygo2006 is a new contributor. Be nice, and check out our Code of Conduct.

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.