PBKDF2-HMAC-SHA-256

Overview & Cryptographic Context

PBKDF2 (Password-Based Key Derivation Function 2), standardized in PKCS #5 v2.1 (RFC 8018) and NIST SP 800-132, applies a pseudorandom function (here HMAC-SHA-256) c times in an iterated XOR chain over a password P, a salt S, and a 32-bit big-endian block counter INT(i):

T_i = F(P, S, c, i) = U₁ ⊕ U₂ ⊕ … ⊕ U_c, U₁ = PRF(P, S ‖ INT(i))

Because HMAC-SHA-256 outputs 32 bytes per block, requesting a 64-byte (dkLen = 64) derived key requires computing two independent blocks T₁ ‖ T₂ with counters 0x00000001 and 0x00000002. This workflow verifies the normative PBKDF2-HMAC-SHA-256 step from RFC 7914 §11 with Password = "passwd", Salt = "salt", c = 1, and dkLen = 64.

Pipeline Architecture & Wiring Flow

1. Password & Salt Ingress (Workflow Input): Supplies the UTF-8 byte representations of "passwd" (6 B) and "salt" (4 B).
2. Key Stretching (PBKDF2 Key Derivation): Configured with hashAlgorithm = "SHA-256", iterations = 1, and keyLength = 64.
3. Derived Key Output (Workflow Output): Outputs the 64-byte (512-bit) DerivedKey.

Nodes & Configuration

Node reference →

Inputs, Outputs & Test Vector Verification

Verification Source: RFC 7914 §11 (P="passwd", S="salt", c=1, dkLen=64)

Inputs

Expected Outputs