---
title: "PBKDF2 vs HMAC: Speed Choices in BIP39 and BIP32 (PDF)"
url: "https://bip39-phrase.com/list-phrase/pbkdf2-vs-hmac-speed-choices-in-bip39-2026-10-23/"
language: "en"
updated: "2026-10-23T00:00:00+00:00"
---

# PBKDF2 vs HMAC: Speed Choices in BIP39 and BIP32

BIP39 uses 2048 PBKDF2 rounds to resist passphrase guessing, while BIP32 relies on a single HMAC round for fast child key derivation.

PDF document · Published October 23, 2026 

[ Open the PDF (6 pages, 257 KB) ](/list-phrase/pbkdf2-vs-hmac-speed-choices-in-bip39-2026-10-23-en.pdf) 

## Contents

1. Why BIP39 Employs Slow Key Stretching
2. Why BIP32 Uses a Single Fast HMAC Round
3. Cryptographic Comparison: BIP39 vs BIP32 Derivation
4. Hardware Wallet Performance Implications
5. FAQ
6. Sources
7. Example sequences from the BIP39 wordlist
8. Reading a BIP39 phrase
9. See also

Keywords: 

HMAC-SHA512 · key derivation

Topic: 

[BIP Standards: BIP39, BIP32, BIP44 and Beyond](/topics/bip-standards/)

## Guides on the same subject

- [BIP39 vs BIP32 vs BIP44: How the Seed Standards Fit Together](/crypto-seed-standards-bip39-vs-bip32-vs-bip44/)  
BIP39 makes the 12–24 words and the seed, BIP32 derives a tree of keys from it, and BIP44 sets each coin's path, such as m/44'/0'/0'/0/0.
- [Derivation Path Explained: What m/44'/0'/0'/0/0 Means](/derivation-path/)  
What each number in a derivation path means, which paths Bitcoin and Ethereum wallets use, and why a restored wallet can show a zero balance.
- [BIP85: Derive Many Seed Phrases From One Seed](/bip85/)  
How BIP85 derives independent child seed phrases, passwords and keys from one master seed: the path scheme, a verified test vector, wallet support and risks.

One of the documents in the [Seed Phrase PDF Archive](/list-phrase/), listed on [archive page 12](/list-phrase/12/).