PBKDF2WithHmacSHA1 in AS3

Question

I'm working on a CRAM auth system using a Flash/Flex client and a Java server (Red5). I have used the as3crypto library before, but as far as I know it does not support PBKDF2. This algorithm is suggested for password encryption by NIST so its what I want to use. Does anyone know of an AS3 compatible library with this algorithm, specifically PBKDF2WithHmacSHA1?

Refs:
http://code.google.com/p/as3crypto/

http://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf

Check [this](http://stackoverflow.com/questions/3210795/pbkdf2-in-bouncy-castle-c-sharp) question. You might have to implement the algorithm with the the help of as3crypto. It's written in C# however. — Ranhiru Jude Cooray, Jun 26 '12 at 04:20

score 1 · Accepted Answer · answered Jul 02 '12 at 10:10

1

This one seems OK: http://code.google.com/p/as3-pbkdf2

answered Jul 02 '12 at 10:10

Florent

12,310
10
49
58

Good find, but it looks only to be PBKDF2 and without HMACSHA1 – Paul Gregoire Jul 02 '12 at 13:40
1

I think you didn't look enough! It uses HMACSHA1 (PBKDF2.as#L105). – Florent Jul 02 '12 at 14:36

score 1 · Answer 2 · answered Sep 19 '12 at 11:55

Did you try putting 'as3 PBKDF2' into google? Took me all of 10 seconds to find these two as they're the top two answers.

The first would suit your needs, but the second seems more versatile as you can specify a hash function.

http://code.google.com/p/as3-pbkdf2/

http://code.google.com/p/as3-pbkdf2-lib/

PBKDF2WithHmacSHA1 in AS3

2 Answers2