Expand description
Original password-protection parameters; no KDF, password or cipher engine.
Wide iteration/key-length values stay borrowed INTEGERs. A selected backend must admit its complete KDF/cipher cost before work, including dependencies. Recognized parameter syntax is checked even for an unsupported backend.
Structs§
- Legacy
- Salt/iteration parameter grammar shared by PBES1 and legacy PKCS#12 PBE.
- Pair
- PBES2 / PBMAC1’s common two-algorithm parameter grammar.
- Pbkdf2
- RFC8018 PBKDF2-params, independent of a backend’s numeric limits.
Enums§
- Prf
- PBKDF2 PRF with honest DEFAULT provenance.
- Protection
- Structural protection classification, independent of algorithm permission.
- Salt
- PBKDF2 salt CHOICE; unknown source remains a real original identifier.