OpenSSL:scrypt
lastmod 2026-11-10created 2017-12-072 edits
OpenSSL's scrypt support provides the memory-hard key derivation function scrypt through the EVP_PKEY_CTX-based KDF interface. Besides the password and salt, a key is derived by setting the CPU/memory cost N, block size r, and parallelization p parameters, and because it requires a large amount of memory it is more resistant to GPU and ASIC attacks than PBKDF2. In recent versions it is also available through EVP_KDF, and on the command line it can be tried with openssl kdf.