3 ms·

PBKDF2 uses HMAC. What's the issue here? A PRF seems the right tool for this particular problem, and HMAC happens to be a PRF that has well understood propertie

PBKDF2 uses HMAC. What's the issue here? A PRF seems the right tool for this particular problem, and HMAC happens to be a PRF that has well understood properties.

cperciva 17y ago
PBKDF2 uses HMAC the same way that multiplication uses addition.
- randombit 17y ago
  So your objection here actually has nothing to do with HMAC at all, but with doing password hashing without iterations?
  - cperciva 17y ago
    My complaint is about using a fast PRF where they should be using a slow PRF, yes.