GeneratePBKDFKey has been added in ColdFusion 11 to allow users to support PBKDF2 key derivation.
Returns
A string that contains the encryption key.
History
ColdFusion 11: Added this function
Category
Security functions, String functions
Function syntax
GeneratePBKDFKey(String algorithm, String string, String salt, int iterations, int keysize)
Parameters
Parameter |
Description |
algorithm |
The encryption algorithm for which to generate the key. The supported algorithms are PBKDF2WithHmacSHA1, PBKDF2WithSHA1, PBKDF2WithSHA224, PBKDF2WithSHA256, PBKDF2WithSHA384, PBKDF2WithSHA512 |
string |
The string to be used for conversion |
salt |
A random salt. The standard recommends a salt length of at least 64 bits (8 characters). The salt needs to be generated using a pseudo random number generator (e.g SHA1PRNG). |
iterations |
The number of PBKDEF iterations to perform. The recommended value for iterations is 1000 or more. |
keysize |
The key size in number of bits. |
Example
Encryption using PBKDF2:
<cfscript> |
Decryption using PBKDF2:
<cfscript> |