How deeply does Spring Security in Action, Second Edition cover pbkdf2?

Shows the implementation choice and configurable constructor, but does not explain PBKDF2 internals.

Pbkdf2

As explained in Spring Security in Action, Second Edition

PBKDF2 is a password-based key-derivation standard that repeatedly applies a pseudorandom function to derive a cryptographic key from a password and salt.

PBKDF2 is a Spring Security password encoder based on the password-based key derivation function 2. It provides a stronger password-hashing option than the deprecated StandardPasswordEncoder, which uses SHA-256. section 4.1.3

PasswordEncoder p = 
  new Pbkdf2PasswordEncoder("secret", 16, 310000, Pbkdf2PasswordEncoder. SecretKeyFactoryAlgorithm.PBKDF2WithHmacSHA256);

Configure a Pbkdf2PasswordEncoder with a secret, salt length, iteration count, and PBKDF2WithHmacSHA256 algorithm. section 4.1.3

Spring Security provides several password-encoder choices:

Use Pbkdf2PasswordEncoder for PBKDF2-based password encoding. section 4.1.3
Contrast it with BCryptPasswordEncoder and SCryptPasswordEncoder; avoid NoOpPasswordEncoder in real-world applications. section 4.1.3

How Spring Security in Action, Second Edition covers it

Cover of Spring Security in Action, Second Edition

liveBook manning.com

Read Spring Security in Action, Second Edition on liveBook Get the book at manning.com

Related concepts

Pbkdf2PasswordEncoderused by · Pbkdf2PasswordEncoder is a Spring Security PasswordEncoder implementation that derives password representations using PBKDF2.
password hashingkind of · Password hashing is the use of a one-way, deliberately costly function to derive values for securely storing and verifying passwords without retaining the original passwords.
hash functionkind of · A hash function deterministically maps input data to a value in a bounded output range, commonly for indexing, lookup, comparison, or integrity checking.

This explainer was generated by Manning's knowledge graph from the text of Spring Security in Action, Second Edition. The section links point to the parts of the book it draws on.