Input

Output

The 256-bit encryption key K; the URL U; the password P; a 256-bit nonce ; and the 32-bit counter i for indexing the password

The password encryption C

・ Pad P with zero bits as necessary to make it 16r bytes

・ Represent P as where each has 128 bits

・ For j from 1 to r do

Concatenate the string where j is of 32 bits

Compute = SHA-512(W_j)

Write as where each substring is of 128 bits

Let

Let

・ Concatenate and output the string