bersec

Member-only story

PBKDF2 and Encrypting Data

Prof Bill Buchanan OBE FRSE

--

What keeps your wireless access point password secure? PBKDF2 (Password-based Key Derivation Function).

What keeps your password secure when you log into the Azure Cloud? That will be PBKDF2.

What is used to release the encryption on a VeraCrypt disk (previously known as TrueCrypt) encrypted drive? That will be PBKDF2.

There is a misconception that we feed the secret between Bob and Alice to directly generate the encryption key these will use. We basically define this as the long-term key that Bob and Alice use and where they shouldn’t use the same key for every session. For this, we use a KDF (Key Derivation Function) and which uses a salt value to generate the actual value that they will use. An example of this is with HKDF:

But, let’s say Bob and Alice share a secret password, and don’t use a key echange method. For this, the most popular key derivation function is PBKDF2 (Password-Based KDF) and which is used within WPA2 for wifi.

--

--

Prof Bill Buchanan OBE FRSE
Prof Bill Buchanan OBE FRSE

Written by Prof Bill Buchanan OBE FRSE

Professor of Cryptography. Serial innovator. Believer in fairness, justice & freedom. Based in Edinburgh. Old World Breaker. New World Creator. Building trust.

No responses yet