Hacker News new | ask | show | jobs
by p4bl0 4444 days ago
> Also, you don't use hashes to store passwords, you use KDFs.

Well, technically a hash can be seen as a particular key derivation function (KDF). Not a proper one for the purpose of storing passwords I agree, but then most KDFs are built using salt + an iteration of hash functions, to my knowledge at least (which I admit is not very deep on the subject).

1 comments

A hash serves as the PRF in a KDF construction; it's a building block, not a subset.