Input
Output | The 256-bit encryption key K; the URL U; the encrypted password C; a 256-bit nonce E; and the 32-bit counter i for indexing the password The plaintext password P |
| ・ C has input size 16r bytes ・ Represent C as where each has 128 bits ・ For j from 1 to r do Concatenate the string where j is of 32 bits Compute = SHA-512(Rj) Write as where each substring is of 128 bits Let Let ・ Remove any padding bytes from ・ Concatenate and output the string |