Online PBKDF2 derived key and verification tool, using Password Based Key Derivation Function 2 to export keys based on passwords and random salt, supporting custom hash functions, derived key length, iteration times and other parameters. Support online verification of PBKDF2 derived keys.
In cryptography, PBKDF1 and PBKDF2 (Password-Based Key Derivation Function 1 and 2) are key derivation functions with a sliding computational cost, used to reduce vulnerability to brute-force attacks. PBKDF2 is part of RSA Laboratories' Public-Key Cryptography Standards (PKCS) series, specifically PKCS #5 v2.0, also published as Internet Engineering Task Force's RFC 2898. It supersedes PBKDF1, which could only produce derived keys up to 160 bits long. RFC 8018 (PKCS #5 v2.1), published in 2017, recommends PBKDF2 for password hashing.
-
The PBKDF2 key derivation function has five input parameters: DK = PBKDF2(PRF, Password, Salt,
c, dkLen). Where:
- PRF is a pseudorandom function of two parameters with output length hLen (e.g., a keyed HMAC).
- Password is the master password from which a derived key is generated.
- Salt is a sequence of bits, known as a cryptographic salt.
- c is the number of iterations desired.
- dkLen is the desired bit-length of the derived key.
- DK is the generated derived key.
- Master Password : The master password from which a derived key is generated.
- Algorithm : PBKDF2 key derivation and verification algorithm, this tool supports PBKDF2WithHmacSHA1, PBKDF2WithHmacSHA224, PBKDF2WithHmacSHA256, PBKDF2WithHmacSHA384, PBKDF2WithHmacSHA512, PBKDF2WithHmacSHA3-224, PBKDF2WithHmacSHA3-256, PBKDF2WithHmacSHA3-384, PBKDF2WithHmacSHA3-512, PBKDF2WithHmacSM3 .
- Iteration : The number of iterations for PBKDF2 calculation ranges from 1 to 65536.
- Derived Key Length : The bit length of the derived key, measured in bits, ranges from 8 to 1000000. The derived key length is a multiple of 8.
- Salt : Random salt involved in PBKDF2 iteration calculation. Supports inputting random salt in string, hex, and base64 formats.
- Derived Key Format : The display or input format of derived key results supports hex and base64 formats.
- Charset : If the input random salt format is string, charset parameters are required.
- Generate : Generate PBKDF2 derived keys using the set parameters.
- Verify : Use the set parameters and the input derived key to verify if the input derived key is correct.