NAME<\/a> EVP_KDF_PBKDF2 \u2212 The PBKDF2 EVP_KDF implementation<\/p>\n Support for computing the PBKDF2<\/small><\/b> password-based KDF<\/small> through the EVP_KDF<\/small><\/b> API.<\/small><\/p>\n The EVP_KDF_PBKDF2<\/small> algorithm implements the PBKDF2<\/small> password-based key derivation function, as described in RFC 2898<\/small> ; it derives a key from a password using a salt and iteration count.<\/p>\n Numeric identity Supported controls<\/b> These controls work as described in ” CONTROLS”<\/small> in EVP_KDF_CTX<\/small><\/b> (3).<\/p>\n iter<\/b> is the iteration count and its value should be greater than or equal to 1. RFC 2898<\/small> suggests an iteration count of at least 1000. The default value is 2048. Any iter<\/b> less than 1 is treated as a single iteration.<\/p>\n A typical application of this algorithm is to derive keying material for an encryption algorithm from a password in the pass<\/b>, a salt in salt<\/b>, and an iteration count.<\/p>\n Increasing the iter<\/b> parameter slows down the algorithm which makes it harder for an attacker to perform a brute force attack using a large number of candidate passwords.<\/p>\n No assumption is made regarding the given password; it is simply treated as a byte sequence.<\/p>\n RFC 2898<\/small><\/p>\n
DESCRIPTION<\/a>
NOTES<\/a>
CONFORMING TO<\/a>
SEE ALSO<\/a>
COPYRIGHT<\/a> <\/p>\n
\nNAME <\/a> <\/h2>\n
DESCRIPTION <\/a> <\/h2>\n
EVP_KDF_PBKDF2<\/small><\/b> is the numeric identity for this implementation; it can be used with the EVP_KDF_CTX_new_id()<\/b> function.<\/p>\n
The supported controls are:
EVP_KDF_CTRL_SET_PASS
EVP_KDF_CTRL_SET_SALT
EVP_KDF_CTRL_SET_ITER
EVP_KDF_CTRL_SET_MD<\/small><\/b><\/p>\nNOTES <\/a> <\/h2>\n
CONFORMING TO <\/a> <\/h2>\n
SEE ALSO <\/a> <\/h2>\n