(Tcl) PBKDF2 - Derive Key from Password

Demonstrates how to derive a symmetric encryption key from a password using PBKDF2. This example matches the results found at this URL: http://www.di-mgt.com.au/cryptoKDFs.html#examplespbkdf

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set crypt [new_CkCrypt2]

# http://www.di-mgt.com.au/cryptoKDFs.html#examplespbkdf

set pw "password"
set pwCharset "ansi"
# Hash algorithms may be: sha1, md2, md5, etc.
set hashAlg "sha1"
# The salt should be 8 bytes:
set saltHex "78578E5A5D63CB06"
set iterationCount 2048
# Derive a 192-bit key from the password.
set outputBitLen 192

# The derived key is returned as a hex or base64 encoded string.
# (Note: The salt argument must be a string that also uses
# the same encoding.)
set enc "hex"

set hexKey [CkCrypt2_pbkdf2 $crypt $pw $pwCharset $hashAlg $saltHex $iterationCount $outputBitLen $enc]

puts "$hexKey"

# The output should have this value:
# BFDE6BE94DF7E11DD409BCE20A0255EC327CB936FFE9364

delete_CkCrypt2 $crypt