News for hackers. Stuff that matters.
Re:An HN style social news site written in Ruby/Sinatra/Redi... by lindvall on Friday October 21, 2011 @02:39PM (#3141069)
"PBKDF1 is recommended only for compatibility with existing applications since the keys it produces may not be large enough for some applications." — RFC 2898, September 2000
Re:An HN style social news site written in Ruby/Sinatra/Redi... by pjscott on Friday October 21, 2011 @03:38PM (#3141312)
The keys it produces are big enough for this application. PBKDF2 can produce output keys of arbitrary size, which is why PBKDF1 got deprecated, but it's not always necessary.