(SQL Server) PBKDF2 - Derive Key from Password

Demonstrates how to derive a symmetric encryption key from a password using PBKDF2. This example matches the results found at this URL: http://www.di-mgt.com.au/cryptoKDFs.html#examplespbkdf

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    -- This example assumes the Chilkat API to have been previously unlocked.
    -- See Global Unlock Sample for sample code.

    DECLARE @crypt int
    -- Use "Chilkat_9_5_0.Crypt2" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.Crypt2', @crypt OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    DECLARE @hexKey nvarchar(4000)

    -- http://www.di-mgt.com.au/cryptoKDFs.html#examplespbkdf

    DECLARE @pw nvarchar(4000)
    SELECT @pw = 'password'
    DECLARE @pwCharset nvarchar(4000)
    SELECT @pwCharset = 'ansi'
    -- Hash algorithms may be: sha1, md2, md5, etc.
    DECLARE @hashAlg nvarchar(4000)
    SELECT @hashAlg = 'sha1'
    -- The salt should be 8 bytes:
    DECLARE @saltHex nvarchar(4000)
    SELECT @saltHex = '78578E5A5D63CB06'
    DECLARE @iterationCount int
    SELECT @iterationCount = 2048
    -- Derive a 192-bit key from the password.
    DECLARE @outputBitLen int
    SELECT @outputBitLen = 192

    -- The derived key is returned as a hex or base64 encoded string.
    -- (Note: The salt argument must be a string that also uses
    -- the same encoding.)
    DECLARE @enc nvarchar(4000)
    SELECT @enc = 'hex'

    EXEC sp_OAMethod @crypt, 'Pbkdf2', @hexKey OUT, @pw, @pwCharset, @hashAlg, @saltHex, @iterationCount, @outputBitLen, @enc


    PRINT @hexKey

    -- The output should have this value:
    -- BFDE6BE94DF7E11DD409BCE20A0255EC327CB936FFE9364

    EXEC @hr = sp_OADestroy @crypt


END
GO