Simon Josefsson wrote: > I propose to use HMAC-SHA-1. Would you or anyone else object > to that? Yes, for the known reasons, I don't trust that SHA-1/2 is okay. Unrelated, the PBKDF2 RFC and RMX draft have no examples to check that implementations actually does what the authors think it should do. Frank