Key Derivation Test Workbench
Compute reproducible HKDF or PBKDF2 vectors from explicit hexadecimal inputs.
Loading tool…
How to use Key Derivation Test Workbench
Compute reproducible HKDF or PBKDF2 vectors from explicit hexadecimal inputs. Select SHA256/SHA512, enter exact input key/password and salt bytes, and choose the output length. HKDF uses info; PBKDF2 uses a bounded iteration count. A separate worker bounds computation.
- Provide input key/password hex, salt hex, hkdf info hex, pbkdf2 iterations, output bytes.
- Choose the supported mode and run the tool. Review its assumptions and any reported errors.
- Copy the result or download a separate output; reset to clear the current form.
Good to know
- Each byte input≤64KiB; output1–1024 bytes; PBKDF2 iterations1–1,000,000. Worker10-second startup then2-second execution; slow settings may be refused.
- Test vectors only: choosing a KDF or iteration count here does not establish a secure password-storage/encryption protocol. Hex represents bytes, not text encoding guesses.
- Inputs are processed on this device and are not automatically saved or uploaded.
Common questions
Why are my text password results different?
This tool consumes hexadecimal bytes. Encode the same text with the same charset first, then compare salt, info, hash, iterations and output length byte-for-byte.
Does this change my original input?
No. The tool returns a separate result. Review that output before using it in another application.
Keep going with related tools
All developer →HMAC Generator
Generate HMAC-SHA-256, SHA-384, or SHA-512 authentication codes from UTF-8 text and a key.
DeveloperSHA Hash Generator
Calculate SHA-256, SHA-384, or SHA-512 digests of exact UTF-8 text using Web Crypto.
FilesBinary Hex Viewer
Display a bounded byte slice with hexadecimal offsets, hex values and an escaped ASCII view.
FilesLocal Authenticated File Encryption
Encrypt or authenticate-decrypt one local file using a documented TJEF v1 AES-GCM password container, without uploading the bytes.