CA Directory: Which Secure Hashing Algorithm (SHA) is supported by PBDKF2?

Products

• CA Directory

Issue/Introduction

CA Directory supports password hashing using the PBKDF2 (Password-Based Key Derivation Function 2) method.

Which Secure Hashing Algorithm (SHA) is supported by PBKDF2 ?

Environment

Release: ETRDIR99000-12.5-Directory
Component:

Resolution

CA Directory uses only HMAC with SHA1 for PBKDF2. This password derivation function (PBKCS5_PBKDF2_HMAC_SHA1) is provided by OpenSSL.

The implementation follows RFC 2898.