Input

Output

The 256-bit encryption key K; the URL U; the encrypted password C; a 256-bit nonce E; and the 32-bit counter i for indexing the password

The plaintext password P

・ C has input size 16r bytes

・ Represent C as where each has 128 bits

・ For j from 1 to r do

Concatenate the string where j is of 32 bits

Compute = SHA-512(R_j)

Write as where each substring is of 128 bits

Let

Let

・ Remove any padding bytes from

・ Concatenate and output the string