PKCS #5 Password Based Key Derivation Function 2 (PBKDF2) Test Vectors

The Public-Key Cryptography Standards (PKCS) #5 Password Based Key Derivation Function 2 (PBKDF2) is used by several protocols to derive encryption keys from a password. For example, Salted Challenge Response Authentication Mechanism (SCRAM) uses PBKDF2 with Hash-based Message Authentication Code (HMAC) and Secure Hash Algorithm (SHA-1). Test vectors for the algorithm were not included in the original specification, but are often useful for implementers. This document addresses this shortcoming.

Below the input strings are encoded using ASCII. The sequence "\0" (without quotation marks) means a literal ASCII NUL value (1 octet).

Input: P = "password" (8 octets) S = "salt" (4 octets) c = 1 dkLen = 20 Output: DK = 0c 60 c8 0f 96 1f 0e 71 f3 a9 b5 24 af 60 12 06 2f e0 37 a6 (20 octets)

Input: P = "password" (8 octets) S = "salt" (4 octets) c = 2 dkLen = 20 Output: DK = ea 6c 01 4d c7 2d 6f 8c cd 1e d9 2a ce 1d 41 f0 d8 de 89 57 (20 octets)

Input: P = "password" (8 octets) S = "salt" (4 octets) c = 4096 dkLen = 20 Output: DK = 4b 00 79 01 b7 65 48 9a be ad 49 d9 26 f7 21 d0 65 a4 29 c1 (20 octets)

Input: P = "password" (8 octets) S = "salt" (4 octets) c = 16777216 dkLen = 20 Output: DK = ee fe 3d 61 cd 4d a4 e4 e9 94 5b 3d 6b a2 15 8c 26 34 e9 84 (20 octets)

Input: P = "passwordPASSWORDpassword" (24 octets) S = "saltSALTsaltSALTsaltSALTsaltSALTsalt" (36 octets) c = 4096 dkLen = 25 Output: DK = 3d 2e ec 4f e4 1c 84 9b 80 c8 d8 36 62 c0 e4 4a 8b 29 1a 96 4c f2 f0 70 38 (25 octets)

Input: P = "pass\0word" (9 octets) S = "sa\0lt" (5 octets) c = 4096 dkLen = 16 Output: DK = 56 fa 6a a7 55 48 09 9d cc 37 d7 f0 34 25 e0 c3 (16 octets)

Barry Brachman and Love Hörnquist Åstrand confirmed the test vectors (using independent implementations) and pointed out a mistake in the salt octet length count.

This document should be considered a Code Component, and is thus effectively available under the BSD license.

None.