How is being from RSA labs an advantage? I'd estimate that it's more likely that...

JoachimSchipper · on March 19, 2012

PBKDF2 is a fairly "obvious" construction (it's mostly just repeated HMAC'ing); it would be really hard to hide anything clever in it.

marshray · on March 19, 2012

For one, it's something the government uses for its own crypto.

Unlike some crypto standards, PBKDF2 is just something too simple and too user-configurable to be able to hide a meaningful hole in. Given that PBKDF1 was found to be less-than-ideal and depracated in favor of the better PBKDF2, it would be a very risky proposition to attempt to weaken it in a way that gave a meaningful advantage to one party over the other.

tptacek · on March 19, 2012

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA IT BURNS IT BURNS