2 ms·

I think he meant it hasn't undergone the same level of public scrutiny. You've certainly spent ample time researching it, and it's obviously been tested, but p

by zheng 15y ago

I think he meant it hasn't undergone the same level of public scrutiny. You've certainly spent ample time researching it, and it's obviously been tested, but possibly not as much something like AES.

cperciva 15y ago
OK, but PBKDF2 hasn't had very much scrutiny either. The entire field of key derivation functions has been very much neglected.
tptacek 15y ago
bcrypt is better tested than PBKDF2: far more publicly "testable" systems use it (bcrypt was the password file format for OpenBSD).
- there 15y ago
  was?
  - tptacek 15y ago
    In the sense of "that's where it came from".