Skip to content

Comment on Bcrypt is now obsoleteparent

Comments

I don't know this guy.

You do now. :-)

Has anyone besides yourself yet vetted this 'key derivation function' (and perhaps you wouldn't mind shortly explaining the difference between a KDF and a cryptographic hash function)?

Has anyone besides yourself yet vetted this 'key derivation function'

Not yet.

perhaps you wouldn't mind shortly explaining the difference between a KDF and a cryptographic hash function

Cryptographic hash functions produce fixed-length collision-resistant output, ideally as fast as possible. KDFs can normally produce arbitrary lengths of output, and don't need to be fast -- in fact, being fast is a disadvantage, since secure KDFs are expensive to compute (because they need to resist brute-force attacks).

Hello :-)

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.