PBKDF2: Performance Matters

Presented at BSidesLV 2015, Aug. 5, 2015, 3:30 p.m. (25 minutes).

Structural problems in how PBKDF2 was originally described mean almost all implementations give attackers an accidental advantage. This talk describes the problem and surveys several implementations.

Presenters:

• Joseph Birr-Pixton
  Joseph, aka ctz, has 7 years of experience with Hardware Security Module firmware development and phone authentication solutions. He spends the rest of his time complaining about how awful computers and electronic security are.

Links:

• https://bsideslv2015.sched.com/event/3uke/pbkdf2-performance-matters
• https://infocon.org/cons/Security BSides/BSides Las Vegas/BSides Las Vegas 2015/PBKDF2 Performance Matters.mp4
• https://www.youtube.com/watch?v=LeQIZVT_qXk