Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Recommendation for Password-Based Key Derivation Part 1: Storage Applications



Meltem Sonmez Turan, Elaine B. Barker, William E. Burr, Lidong Chen


This Recommendation specifies techniques for the derivation of master keys from passwords or passphrases to protect stored electronic data or data protection keys.
Special Publication (NIST SP) - 800-132
Report Number


Password-Based Key Derivation Functions, Salt, Iteration Count, Disk Encryption, protection of data in storage


Sonmez, M. , Barker, E. , Burr, W. and Chen, L. (2010), Recommendation for Password-Based Key Derivation Part 1: Storage Applications, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], (Accessed June 13, 2024)


If you have any questions about this publication or are having problems accessing it, please contact

Created December 22, 2010, Updated November 10, 2018