Password Verification with PBKDF2 in Java

前端 未结 3 677
礼貌的吻别
礼貌的吻别 2020-11-29 04:41

I\'m doing password based file encryption in Java; I\'m using AES as the underlying encryption algorithm and PBKDF2WithHmacSHA1 to derive a key from a salt and

3条回答
  •  -上瘾入骨i
    2020-11-29 05:26

    There is no "quick check" mechanism that is secure, by definition. The whole point of using PBKDF2 or related techniques is to make password checking slow, to foil password cracking programs. If you added a quick check system, password crackers would be able to guess passwords in bulk very quickly.

提交回复
热议问题