Questions tagged [s2k]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
4 votes
0 answers

Is there any difference in security between S2K and PBKDF2?

S2K, specified in RFC 4880 §, is a KDF designed for the OpenPGP standard which concatenates a password and salt and feeds this, repeating, into a hash function for a configurable number of ...
forest's user avatar
  • 15.1k
3 votes
1 answer

In GnuPG, what's the difference between --s2k-cipher-algo and --cipher-algo? [duplicate]

I want to change some encryption options while using GnuPG to encrypt a file symmetrically. 1) However, for choosing the cipher algorithm, GnuPG has two commands and I don't know which one to use. ...
COLD  Crypto's user avatar
8 votes
2 answers

What exactly does s2k do in gpg

So I recently discovered the --s2k mode in gpg. Sadly it is not very well-documented. I mean, what is ...
Richard R. Matthews's user avatar
5 votes
2 answers

PGP String-to-Key specifiers

I've been reading through the PGP Standard and here I'm a little confused. This section is discussing converting string data to a session key. I'm confused about the paragraph in bold. First off, what ...
Yelneerg's user avatar
2 votes
2 answers

RSA Key Generation Parameters - public exponent, certainty, string-to-key count

I want to know what values are appropriate for the public exponent and certainty when generating an RSA Key (for example using Bouncy Castle RSAKeyGenerationParameters function). What is the ...
user12903's user avatar
17 votes
2 answers

Is bcrypt better than GnuPG's iterated+salted hashing method?

GnuPG has slow hash built-in in form of iterated+salted S2K. Does it have disadvantages in comparison with bcrypt or scrypt? Is GnuPG's slow hash method easily automated in GPUs?
Andrei Botalov's user avatar