Bcrypt is not really a KDF, it's a strong hash generator + verification processo...

		sk5t on Nov 7, 2016 \| parent \| context \| favorite \| on: LessPass: sync-less open source password manager Bcrypt is not really a KDF, it's a strong hash generator + verification processor rolled into one for easy consumption. See PBKDF2 / RFC2898 for tooling appropriate to generate an expensive-to-generate cryptographic key from a user-supplied passphrase.