Password-Based Key Derivation Function 2
PBKDF2 stretches a password into a cryptographic key by applying HMAC thousands or millions of times with a salt. The repeated work slows down brute-force and rainbow-table attacks on stolen password databases. It is standardized in PKCS #5 and still widely used, though memory-hard alternatives like scrypt and Argon2 resist GPU cracking better.