diff options
| author |   tedu <tedu@openbsd.org> | 2012-09-06 19:48:12 +0000 |
|---|---|---|
| committer | tedu <tedu@openbsd.org> | 2012-09-06 19:48:12 +0000 |
| commit | 451f933ea26b562dd9c995c97c4bd07a8b5b994d (patch) | |
| tree | 15568d2215a2ba661b5a55360f1c1158b34208a4 /lib/libutil | |
| parent | move pkcs5_pbkdf5 function to libutil so everybody can play with it (diff) | |
| download | wireguard-openbsd-451f933ea26b562dd9c995c97c4bd07a8b5b994d.tar.xz wireguard-openbsd-451f933ea26b562dd9c995c97c4bd07a8b5b994d.zip | |
some better phrasing, mostly via jsing
Diffstat (limited to 'lib/libutil')
| -rw-r--r-- | lib/libutil/pkcs5_pbkdf2.3 | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/lib/libutil/pkcs5_pbkdf2.3 b/lib/libutil/pkcs5_pbkdf2.3 index 7a40737561b..1ddadab9522 100644 --- a/lib/libutil/pkcs5_pbkdf2.3 +++ b/lib/libutil/pkcs5_pbkdf2.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pkcs5_pbkdf2.3,v 1.1 2012/09/06 19:41:59 tedu Exp $ +.\" $OpenBSD: pkcs5_pbkdf2.3,v 1.2 2012/09/06 19:48:12 tedu Exp $ .\" .\" Copyright (c) 2012 Ted Unangst <tedu@openbsd.org> .\" @@ -28,12 +28,14 @@ .Sh DESCRIPTION The .Nm -function converts a password into a key suitable for encryption. +function converts a password into a byte array suitable for use as +encryption key. The password and salt values are combined and repeatedly hashed .Ar rounds times. -The repeated hashing is designed to thwart password guessing attacks from -discovering the key. +The salt value should be randomly generated beforehand. +The repeated hashing is designed to thwart discovery of the key via +password guessing attacks. The higher the number of rounds, the slower each attempt will be. A minumum value of at least 1000 is recommended. .Sh RETURN VALUES |