New answers tagged pbkdf-2
3
I've seen one case mention that using SHA-512 would increase the memory requirements for attackers. In some cases, I know that increasing memory requirements will make GPU hashing less effective. Not sure if that's true in this case.
If you're going to use PBKDF2 (instead of, say, Argon2) and you have the option to use SHA-512, you should definitely pick it,...
3
There is not much of a substantive difference between using SHA-1 or SHA-256 with PBKDF2 to hash a password: they use nearly the same amount of memory (20 bytes vs. 32 bytes of state, plus 8 bytes of message length and 64 bytes of input buffer), and SHA-512 uses only double what SHA-256 uses (64 bytes state, 16 bytes length, 128 bytes buffer).
If you can, ...
3
LastPass uses PBKDF2 with SHA256. The number of iterations (also called count) in PBKDF2(PRF=SHA256, Password, Salt, iterations, dkLen) is used against the password crackers. With the increase of the computation power, the developers change the number of iterations from 5000 to 100100 and there is nothing special about it other than being large. Having ...
Top 50 recent answers are included
