29 ms·
It adds a salt. Otherwise entropy shouldn't really be a factor - your input password could be more entropic than your output hash, in terms of shannon entropy/
by staticassertion 5y ago
It adds a salt. Otherwise entropy shouldn't really be a factor - your input password could be more entropic than your output hash, in terms of shannon entropy/ number of bits needed to represent the values.
- charcircuit 5y agoI am referring to the diagram saying low entropy passphase -> high entropy key Since the salt is included in the output of the KDF, is it really adding entropy to the key?
- staticassertion 5y agoYeah, I found the diagram a bit confusing as well. I don't think that a KDF is adding any entropy.
- tptacek 5y agoThe salt adds no entropy.