RFC 2898: PKCS #5: Password-Based Cryptography Specification Version 2.0

This document provides recommendations for the implementation of password-based cryptography, covering key derivation functions, encryption schemes,…

Read RFC 2898 on the RFC Editor

Incoming relationships (19 related RFCs)

Obsoleted by — RFC 8018: PKCS #5: Password-Based Cryptography Specification Version 2.1
Normatively referenced by — RFC 7518: JSON Web Algorithms (JWA)
Normatively referenced by — RFC 5201: Host Identity Protocol
Normatively referenced by — RFC 7914: The scrypt Password-Based Key Derivation Function
Normatively referenced by — RFC 4009: The SEED Encryption Algorithm
Normatively referenced by — RFC 6476: Using Message Authentication Code (MAC) Encryption in the Cryptographic Message Syntax (CMS)
Normatively referenced by — RFC 8009: AES Encryption with HMAC-SHA2 for Kerberos 5
Informatively referenced by — RFC 5869: HMAC-based Extract-and-Expand Key Derivation Function (HKDF)
Informatively referenced by — RFC 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence
Informatively referenced by — RFC 3370: Cryptographic Message Syntax (CMS) Algorithms
Informatively referenced by — RFC 5802: Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms
Informatively referenced by — RFC 7401: Host Identity Protocol Version 2 (HIPv2)
Informatively referenced by — RFC 3962: Advanced Encryption Standard (AES) Encryption for Kerberos 5
Informatively referenced by — RFC 5018: Connection Establishment in the Binary Floor Control Protocol (BFCP)
Informatively referenced by — RFC 4764: The EAP-PSK Protocol: A Pre-Shared Key Extensible Authentication Protocol (EAP) Method
Informatively referenced by — RFC 7717: IKEv2-Derived Shared Secret Key for the One-Way Active Measurement Protocol (OWAMP) and Two-Way Active Measurement Protocol (TWAMP)
Informatively referenced by — RFC 6149: MD2 to Historic Status
Informatively referenced by — RFC 3185: Reuse of CMS Content Encryption Keys
Informatively referenced by — RFC 7804: Salted Challenge Response HTTP Authentication Mechanism