# Specification

AES key length: 128 bit
AES block length: 128 bit
AES key: first 128 bit of the key derivation output
AES mode: CTR
AES salt length: 64 bit
CTR counter length: 64 bit
AES padding: none
Authentication function: HMAC-SHA256
Authentication function key length: 128 bit
Authentication function key: last 128 bit of the key derivation output
Key derivation function: PBKDF2-HMAC-SHA256
Key derivation salt length: 256 bit
Key derivation output length: 256 bit
Key derivation iterations: 8192
Ciphertext composition: key derivation salt (256 bit) + AES salt (64 bit) + authentication code (256 bit) + ciphertext (cleartext length)