PBKDF2

复制import hashlib
import binascii

# PBKDF2-HMAC-SHA256 密钥派生
password = b"my_secure_password"
salt = b"random_salt_123"
dklen = 32  # 派生密钥长度（字节）
iterations = 100000

dk = hashlib.pbkdf2_hmac(
    "sha256",
    password,
    salt,
    iterations,
    dklen=dklen
)

# 输出十六进制字符串
print(binascii.hexlify(dk).decode())
# 示例输出：b8c3f1a2...（32字节=64个十六进制字符）

# 验证：相同输入应产生相同输出
assert hashlib.pbkdf2_hmac("sha256", password, salt, iterations, dklen=dklen) == dk

复制package main

import (
	"crypto/pbkdf2"
	"crypto/sha256"
	"encoding/hex"
	"fmt"
)

func main() {
	password := []byte("my_secure_password")
	salt := []byte("random_salt_123")
	iterations := 100000
	keyLen := 32 // 派生密钥长度（字节）

	dk := pbkdf2.Key(password, salt, iterations, keyLen, sha256.New)

	fmt.Println(hex.EncodeToString(dk))
	// 示例输出：b8c3f1a2...（64个十六进制字符）

	// 验证一致性
	dk2 := pbkdf2.Key(password, salt, iterations, keyLen, sha256.New)
	if string(dk) != string(dk2) {
		panic("PBKDF2 结果不一致")
	}
}

复制// 使用 Web Crypto API（浏览器环境）
async function deriveKey(password, salt) {
  const enc = new TextEncoder();
  const keyMaterial = await crypto.subtle.importKey(
    "raw",
    enc.encode(password),
    "PBKDF2",
    false,
    ["deriveBits"]
  );

  const dk = await crypto.subtle.deriveBits(
    {
      name: "PBKDF2",
      salt: enc.encode(salt),
      iterations: 100000,
      hash: "SHA-256"
    },
    keyMaterial,
    256 // 派生密钥长度（位）
  );

  // 转换为十六进制字符串
  const hashArray = Array.from(new Uint8Array(dk));
  const hex = hashArray.map(b => b.toString(16).padStart(2, '0')).join('');
  console.log(hex);
  // 示例输出：b8c3f1a2...（64个十六进制字符）
}

deriveKey("my_secure_password", "random_salt_123").catch(console.error);