Algorithm deriving cryptographic keys from passwords or other secrets. Adds computational cost to resist brute force. Examples include PBKDF2, bcrypt, and Argon2.