Skip to content
Fast PBKDF2 implementation in C
Branch: master
Clone or download
Latest commit 3c56895 Jul 18, 2018
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
.gitignore Basic windows support Oct 29, 2015
.travis.yml travis: run with and without openmp Jul 28, 2015
LICENSE
Makefile Add -fPIC flag for use in shared libraries May 3, 2018
Makefile.nmake
README.md Fix link to article Jul 18, 2018
WINDOWS.md Some windows details Oct 30, 2015
bench.c Fix GCC build (wall_now defined static; unused here) Oct 29, 2015
benchmulti.c Basic windows support Oct 29, 2015
benchutil.h
fastpbkdf2.c
fastpbkdf2.h
gentests.py migrate test data to python, and generate tests Aug 23, 2015
testdata.py migrate test data to python, and generate tests Aug 23, 2015
testfastpbkdf2.c migrate test data to python, and generate tests Aug 23, 2015

README.md

fastpbkdf2

This is a fast PBKDF2-HMAC-{SHA1,SHA256,SHA512} implementation in C.

It uses OpenSSL's hash functions, but out-performs OpenSSL's own PBKDF2 thanks to various optimisations in the inner loop.

Build Status

Interface

void fastpbkdf2_hmac_sha1(const uint8_t *pw, size_t npw,
                          const uint8_t *salt, size_t nsalt,
                          uint32_t iterations,
                          uint8_t *out, size_t nout);

void fastpbkdf2_hmac_sha256(const uint8_t *pw, size_t npw,
                            const uint8_t *salt, size_t nsalt,
                            uint32_t iterations,
                            uint8_t *out, size_t nout);

void fastpbkdf2_hmac_sha512(const uint8_t *pw, size_t npw,
                            const uint8_t *salt, size_t nsalt,
                            uint32_t iterations,
                            uint8_t *out, size_t nout);

Please see the header file for details and constraints.

Performance

These values are wall time, output from the bench tool.

AMD64

Hash OpenSSL fastpbkdf2 (comparison)
SHA1 11.84s 3.07s x3.86
SHA256 16.54s 7.45s x2.22
SHA512 21.90s 9.33s x2.34

222 iterations, 1.86GHz Intel Atom N2800, amd64.

ARM

Hash OpenSSL fastpbkdf2 (comparison)
SHA1 30.4s 4.43s x6.86
SHA256 36.52s 7.04s x5.19
SHA512 77.44s 28.1s x2.76

220 iterations, Raspberry Pi - 700MHz ARM11.

Requirements

  • OpenSSL's libcrypto.
  • C compiler supporting C99.

Building and testing

Run 'make test' to build and run tests.

The program bench provides a very basic performance comparison between OpenSSL and fastpbkdf2.

The implementation has one header and one translation unit. This is intended for easy integration into your project.

Optional parallelisation of outer loop

PBKDF2 is misdesigned and you should avoid asking for more than your hash function's output length. In other words, nout should be <= 20 for fastpbkdf2_hmac_sha1, <= 32 for fastpbkdf2_hmac_sha256 and <= 64 for fastpbkdf2_hmac_sha512.

If you can't avoid this (for compatibility reasons, say) compile everything with -fopenmp and -DWITH_OPENMP to have this computation done in parallel. Note that this has non-zero overhead.

The program multibench provides a basic performance comparison for using this option.

Windows

Details on building for Windows.

License

CC0.

Language bindings

Author

Joseph Birr-Pixton jpixton@gmail.com

You can’t perform that action at this time.