
	Where results make sense

Topic: Key derivation function

Related Topics

Identity function

Cryptography standards

Magnetic drum

Arabic script

McIntosh, Minnesota

Kandiyohi, Minnesota

Lamoille County, Vermont

Age of consent

RFC

Durham University

History of Southeast Asia

Tennis Court Oath

Monarchy

1972

168 Sibylla

	Key (cryptography) - Wikipedia, the free encyclopedia
		Keys are also used in other cryptographic algorithms, such as digital signature schemes and keyed-hash functions (also known as MACs), often used for authentication.
		A newer class of "public key" cryptographic algorithms was discovered in the 1970s which use a pair of keys, one to encrypt and one to decrypt.
		When a password (or passphrase) is used as an encryption key, well-designed cryptosystems first run it through a key-derivation algorithm which adds salt and reduces or expands it to the key length desired, for example by reducing a long phrase into a 128-bit value suitable for use in a block cipher.
	en.wikipedia.org /wiki/Key_(cryptography) (863 words)

	RFC 2898 (rfc2898) - PKCS #5: Password-Based Cryptography Specification Ve (Site not responding. Last check: 2007-09-07)
		The keys in the set would be obtained as substrings of the output of the key derivation function.
		The length of the derived key is bounded by the length of the hash function output, which is 16 octets for MD2 and MD5 and 20 octets for SHA-1.
		Obtain the key length in octets, dkLen, for the derived key for the underlying encryption scheme.
	www.faqs.org /rfcs/rfc2898.html (6585 words)

	[No title]
		Simplified Profile for CBC Ciphers with Key Derivation The profile outlined in sections 3 and 4 describes a large number of operations that must be defined for encryption and checksum algorithms to be used with Kerberos.
		As the derived key is the result of one or more encryptions in the base key, deriving the base key from the derived key is equivalent to determining the key from a very small number of plaintext/ciphertext pairs.
		For purposes of the string-to-key function, the DES CBC checksum is calculated by CBC encrypting a string using the key as IV and the final eight byte block as the checksum.
	www.mit.edu /afs/athena.mit.edu/reference/rfc/rfc3961.txt (10338 words)

	kaliski-pkcs5-v2-04.txt-67841.txt
		In a password-based key derivation function, the base key is a password and the other parameters are a salt value and an iteration count, as outlined in Section 3.
		Apply the PBKDF1 key derivation function (Section 5.1) to the password P, the salt S, and the iteration count c to produce a derived key DK of length 16 octets: DK = PBKDF1 (P, S, c, 16) 3.
		Encrypt the message M with the underlying encryption scheme under the derived key DK to produce a ciphertext C. (This step may involve selection of parameters such as an initialization vector and padding, depending on the underlying scheme.) 5.
	ietfreport.isoc.org /idref/draft-kaliski-pkcs5-v2 (6700 words)

	RFC 2898 - PKCS #5: Password-Based Cryptography Specification Version 2.0. B. Kaliski.
		RFC 2898 Password-Based Cryptography September 2000 5.1 PBKDF1 PBKDF1 applies a hash function, which shall be MD2 [6], MD5 [19] or SHA-1 [18], to derive keys.
		RFC 2898 Password-Based Cryptography September 2000 derived key may be limited by the structure of the underlying pseudorandom function.
		RFC 2898 Password-Based Cryptography September 2000 The salt S, the iteration count c, the key length dkLen, and identifiers for the key derivation function and the underlying encryption scheme may be conveyed to the party performing decryption in an AlgorithmIdentifier value (see Appendix A.4).
	rfc.sunsite.dk /rfc/rfc2898.html (6849 words)

	Zvon - RFC 3711 [The Secure Real-time Transport Protocol (SRTP)] - Rationale
		Key derivation reduces the burden on the key establishment.
		Thus, the key management protocol needs to exchange only one master key (plus master salt when required), and then SRTP itself derives all the necessary session keys (via the first, mandatory application of the key derivation function).
		This means that the attacker who is able to recover a certain session key, is anyway not able to have access to messages secured under previous and later session keys (derived from the same master key).
	www.zvon.org /tmRFC/RFC3711/Output/chapter7.html (1036 words)

	Pantek - Expert Linux and Open Source Services: : RFC #2898: PKCS #5: Password-Based Cryptography Specification Version ...
		Although it may be possible for an opponent to construct a table of possible passwords (a so- called "dictionary attack"), constructing a table of possible keys Kaliski Informational [Page 4] RFC 2898 Password-Based Cryptography September 2000 will be difficult, since there will be many possible keys for each password.
		Output the ciphertext C. Kaliski Informational [Page 14] RFC 2898 Password-Based Cryptography September 2000 The salt S, the iteration count c, the key length dkLen, and identifiers for the key derivation function and the underlying encryption scheme may be conveyed to the party performing decryption in an AlgorithmIdentifier value (see Appendix A.4).
		Kaliski Informational [Page 15] RFC 2898 Password-Based Cryptography September 2000 7.1 PBMAC1 PBMAC1 combines a password-based key derivation function, which shall be PBKDF2 (Section 5.2) for this version of PKCS #5, with an underlying message authentication scheme (see Appendix B.3 for an example).
	www.pantek.com /library/general/rfc/rfc2898.html (6614 words)

	RFC2898
		PBES1 combines the PBKDF1 function (Section 5.1) with an underlying block cipher, which shall be either DES [15] or RC2(tm) [21] in CBC mode [16].
		PBMAC1 combines a password-based key derivation function, which shall be PBKDF2 (Section 5.2) for this version of PKCS #5, with an underlying message authentication scheme (see Appendix B.3 for an example).
		HMAC-SHA-1 is the pseudorandom function corresponding to the HMAC message authentication code [7] based on the SHA-1 hash function [18].
	www.scit.wlv.ac.uk /appdocs/rfcs/rfc28xx/RFC2898.html (6947 words)

	Zvon - RFC 2898 [PKCS #5: Password-Based Cryptography Specification Version 2.0] - Key Derivation Functions
		A key derivation function produces a derived key from a base key and other parameters.
		PBKDF1 applies a hash function, which shall be MD2 [6], MD5 [19] or SHA-1 [18], to derive keys.
		PBKDF2 applies a pseudorandom function (see Appendix B.1 for an example) to derive keys.
	www.zvon.org /tmRFC/RFC2898/Output/chapter5.html (721 words)

	[saag] Standards for Key Derivation
		Bob: >>I agree that key derivation is an important topic, and that it would be >>good to standardize on a kdf that is generally applicable.
		An integer hashlen that is the length in bits of the hash function >to be used to derive the keying material.
		This allows the KDF to have a loose linkage with protocol state.
	bs.mit.edu /pipermail/saag/2001q4/000292.html (625 words)

	[No title]
		16 for MD2 and MD5, or dkLen > 20 for SHA-1, output "derived key too long" and stop.
		T_c = Hash (T_{c-1}), DK = Tc Output the derived key DK.
		Separate the derived key DK into an encryption key K consisting of the first eight octets of DK and an initialization vector IV consisting of the next eight octets: K = DK Concatenate M and a padding string PS to form an encoded message EM: EM = M
	www.rfc-editor.org /rfc/rfc2898.txt (4798 words)

Try your search on: Qwika (all wikis)