Editing PBKDF2 (section)

{{Short description|In PBKDF1}}
{{use mdy dates|date=May 2022}}

In [[cryptography]], '''PBKDF1''' and '''PBKDF2''' ('''Password-Based Key Derivation Function 1''' and '''2''') are [[key derivation function]]s with a sliding computational cost, used to reduce vulnerability to [[brute-force attack]]s.<ref name="RFC3962"/>

PBKDF2 is part of [[RSA Laboratories]]' [[Public-Key Cryptography Standards]] (PKCS) series, specifically PKCS{{nbsp}}#5 v2.0, also published as [[Internet Engineering Task Force]]'s RFC{{nbsp}}2898. It supersedes PBKDF1, which could only produce derived keys up to 160 bits long.<ref>{{Cite journal|title = PKCS{{nbsp}}#5: Password-Based Cryptography Specification, Version 2.0 |url=http://tools.ietf.org/html/rfc2898#section-5.2 |id=RFC{{nbsp}}2898 |website = tools.ietf.org |access-date = 2015-10-23|first = Burt|last = Kaliski|year=2000 |doi=10.17487/RFC2898 |author-link=Burt Kaliski|doi-access=free }}</ref> RFC{{nbsp}}8018 (PKCS{{nbsp}}#5 v2.1), published in 2017, recommends PBKDF2 for password hashing.<ref>{{cite journal |id=RFC{{nbsp}}8018 |title=PKCS{{nbsp}}#5: Password-Based Cryptography Specification, Version 2.1 |first=Kathleen |last=Moriarty |editor-first1=K |editor-last1=Moriarty |display-authors=etal |url=https://tools.ietf.org/html/rfc8018 |website = tools.ietf.org|year=2017 |doi=10.17487/RFC8018 |url-access=subscription }}</ref>