Key derivation function: Difference between revisions

Revision as of 16:22, 29 December 2023

Revision as of 09:43, 1 February 2024

Line 43:

As of May 2023, [[OWASP]] recommends the following KDFs for password hashing, listed in order of priority:<ref name="owasp">{{cite web|url=https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html | title=Password Storage Cheat Sheet | work=OWASP Cheat Sheet Series |publisher=OWASP |accessdate=2023-05-17}}</ref>

1.# [[Argon2|Argon2id]]

2.# [[scrypt]] if Argon2id is unavailable

3.# [[bcrypt]] for legacy systems

2. [[scrypt]] if Argon2id is unavailable

4.# [[PBKDF2]] if FIPS-140 compliance is required

3. [[bcrypt]] for legacy systems

4. [[PBKDF2]] if FIPS-140 compliance is required

== References ==