PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Understanding the Benefits of Key Derivation Functions: A Deep Dive into PBKDF2

hackerone.com | research | #cryptography | #kdf | #pbkdf2 | #hashing | #password-storage
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

PBKDF2 hardens password hashing via salting and many iterations, making brute-force and rainbow table attacks far costlier than with fast hashes like MD5 or SHA-1. Includes a Python example.
Published
Collected

Related coverage

vulnerability · hackerone.com
Identifying and Remediating CWE-328 Reversible One-Way Hash in Django Applications
Weak algorithms like MD5, improper salting, and homemade hash functions make Django password hashing reversible, violating CWE-328. Learn to spot the flaws and move to stronger, salted schemes.
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · eshard.com
Evaluating Botan’s Resistance to Physical Attacks: An End-to-End Study
We evaluated Botan 3.7.1’s ECC against side-channel attacks, from source code to real hardware. Three attack paths found. Accepted at HS3 2026.
research · eshard.com
A side-channel analysis of the Arm CryptoCell-310 AES
First public side-channel attack on the Arm CryptoCell-310: full AES key recovery via EM analysis and collision-correlation.
research · eshard.com
Webinar: Exploiting Physical Vulnerabilities of Keccak in PQC
See how SASCA and fault injection exploit Keccak's physical vulnerabilities in real post-quantum cryptography implementations.
research · eshard.com
Webinar: Securing Post-Quantum Implementations Against Physical Attacks
Join eShard and PQShield for a technical webinar on post-quantum cryptography, ML-KEM implementations, and how side-channel analysis helps evaluate physical attack resistance.
Back