RE: encryption with pass-phrase

[Frank Palazzolo]

You might want to look into what PGP does:

Passphrase FAQ's
http://www.pgpi.org/doc/faq/passphrase/

OpenPGP spec (see S2K stuff):
http://www.ietf.org/rfc/rfc2440.txt

-Frank