From 719907c863ba9a5b61a1a056366e23e1100516e8 Mon Sep 17 00:00:00 2001 From: Alex Gaynor Date: Wed, 12 Feb 2014 14:01:05 -0800 Subject: Be clear about HKDF's applicability for password storage --- docs/hazmat/primitives/key-derivation-functions.rst | 1 + 1 file changed, 1 insertion(+) (limited to 'docs/hazmat/primitives/key-derivation-functions.rst') diff --git a/docs/hazmat/primitives/key-derivation-functions.rst b/docs/hazmat/primitives/key-derivation-functions.rst index 1937c2ec..da47ccd3 100644 --- a/docs/hazmat/primitives/key-derivation-functions.rst +++ b/docs/hazmat/primitives/key-derivation-functions.rst @@ -128,6 +128,7 @@ Different KDFs are suitable for different tasks such as: `HKDF`_ (HMAC-based Extract-and-Expand Key Derivation Function) is suitable for deriving keys of a fixed size used for other cryptographic operations. + **HKDF should not be used for password storage.** .. doctest:: -- cgit v1.2.3