Documentation Key Derivation Algorithms

# Key Derivation Algorithms

A key derivation function (KDF) transforms your password (and optional keyfiles) into cryptographic keys used to decrypt a VeraCrypt volume header. KDFs slow down brute-force attacks and protect against precomputation by incorporating a large random salt and a tunable work factor (e.g., iterations, memory).

### Available Algorithms in VeraCrypt

- Argon2id: A modern, memory-hard KDF (based on BLAKE2b-512 internally). Recommended for new non-system volumes. No separate hash selection is required.
- PBKDF2-HMAC: A widely deployed KDF that uses HMAC with a selectable hash function. Supported HMAC hashes in VeraCrypt: SHA-512, SHA-256, Whirlpool, BLAKE2s-256, and Streebog.