EVP_KDF-PBKDF1(7SSL)

📦
version 4.0.3 · 13 versions
, in ubuntu stonking

💖 EVP_KDF-PBKDF1 💖

okay bestie, gather round, because this is the tea on the PBKDF1 EVP_KDF implementation — straight out of the OpenSSL manual, section 7SSL. no cap. 🫶

✨ NAME ✨

EVP_KDF-PBKDF1 — literally the PBKDF1 EVP_KDF implementation. that's the whole name. iconic. 👑

🌸 DESCRIPTION 🌸

so like, this is the support for computing the PBKDF1 password-based KDF through the EVP_KDF API. slay. 💅

the EVP_KDF-PBKDF1 algorithm implements the PBKDF1 password-based key derivation function, exactly as described in RFC 8018. it derives a key from a password using a salt and an iteration count. that's the vibe. 🦋

🎀 Identity 🎀

"PBKDF1" is the name for this implementation — that's what you feed to the EVP_KDF_fetch() function. remember it. write it down. tuck it in your little heart. 💜

🌈 Supported parameters 🌈

here's the roster of supported parameters, no gatekeeping:

  • "pass" (OSSL_KDF_PARAM_PASSWORD) — <octet string>
  • "salt" (OSSL_KDF_PARAM_SALT) — <octet string>
  • "iter" (OSSL_KDF_PARAM_ITER) — <unsigned integer>
    • this parameter has a default value of 0 and should be set. like, please set it. don't leave it at zero, bestie, it's giving ✨nothing✨.
  • "properties" (OSSL_KDF_PARAM_PROPERTIES) — <UTF8 string>
  • "digest" (OSSL_KDF_PARAM_DIGEST) — <UTF8 string>
    • these parameters work as described in "PARAMETERS" in EVP_KDF(3). go read that one, it's a whole thing.

💀 NOTES 💀

a typical application of this algorithm is to derive keying material for an encryption algorithm from a password in "pass", a salt in "salt", and an iteration count. classic combo, honestly. 🔥

increasing the "iter" parameter slows down the algorithm, which makes it harder for an attacker to perform a brute force attack using a large number of candidate passwords. so crank it up, it's literally the whole point. 😭

no assumption is made regarding the given password — it is simply treated as a byte sequence. no judgment, no questions asked. byte sequence supremacy. 🙈

⚠️ heads up bestie: the legacy provider needs to be available in order to access this algorithm. if it's not there, this whole thing is not it. 🍓

👑 CONFORMING TO 👑

RFC 8018. periodt. 💅

🔥 SEE ALSO 🔥

go forth and read. iykyk. 💜

🦋 HISTORY 🦋

this functionality was added in OpenSSL 3.0. a modern classic, fr fr. ✨

Copyright 2021 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

okay that's the whole manual!! this was version 4.0.3, dated 2026-09-29, mwah 💋 go set your "iter" and stay slaying, bestie 🌈💖🎀

📦 where this page comes from