OpenSSL:PBKDF2
lastmod 2026-11-10created 2017-12-073 edits
OpenSSL's PBKDF2 support provides the PBKDF2 algorithm, which derives a cryptographic key from a password, through the PKCS5_PBKDF2_HMAC() function. It takes the password, salt, iteration count, hash function (EVP_sha256(), etc.), and output length as arguments and produces a key of the specified length. The key point is raising the iteration count to increase the cost of brute-force attacks, and in recent versions the same functionality is also available through the EVP_KDF interface.