PKCS #5: Password-Based Cryptography Standard: www.rsasecurity.com/rsalabs/node.asp?id=2127
Password Minder Internals by Keith Brown: http://msdn.microsoft.com/msdnmag/issues/04/10/SecurityBriefs/