Input
Output | The 256-bit encryption key K; the URL U; the password P; a 256-bit nonce ; and the 32-bit counter i for indexing the password The password encryption C |
| ・ Pad P with zero bits as necessary to make it 16r bytes ・ Represent P as where each has 128 bits ・ For j from 1 to r do Concatenate the string where j is of 32 bits Compute = SHA-512(Wj) Write as where each substring is of 128 bits Let Let ・ Concatenate and output the string |