PBKDF2 (RFC 8018) stretches a password into a key by running HMAC many times over. It is the KDF built into WebCrypto, WPA2, and most older password databases. OWASP currently suggests 600,000 iterations for PBKDF2-HMAC-SHA256. Deriving is deliberately slow, so this runs on the button rather than as you type.
0 chars; 0 lines
0 chars; 0 lines
marduc812
© 202620260902_acd5cb6