Large Key Sizes and the Security of Password-Based Cryptography

摘要

We expose a potential vulnerability in the common use of password-based cryptography. When employing a user-chosen password to generate cryptographic keys which themselves are larger than the digest size of the underlying hash function, a purl of the resulting key is produced deter-ministically and this, in turn, may lead to an exploitable weakness.