Key Derivation Functions (KDFs) (hukdf.h)

A key derivation function (KDF) computes a value suitable for a cryptographic key using a hash algorithm.

The function hu_KDFDerive() has an argument specifying which KDF algorithm to use to compute a cryptographic key. This is referred to as a key derivation algorithm ID.

The following constants are defined in hukdf.h:

  • HU_KDF_IEEE_KDF1_SHA1 (IEEE 1363-2000 KDF1 based on SHA-1)
  • HU_KDF_ANSI_SHA1 (ANSI X9.42/X9.63 KDF based on SHA-1)
  • HU_KDF_ANSI_SHA224 (ANSI X9.42/X9.63 KDF based on SHA-224)
  • HU_KDF_ANSI_SHA256 (ANSI X9.42/X9.63 KDF based on SHA-256)
  • HU_KDF_ANSI_SHA384 (ANSI X9.42/X9.63 KDF based on SHA-384)
  • HU_KDF_ANSI_SHA512 (ANSI X9.42/X9.63 KDF based on SHA-512)
  • HU_KDF_NIST_ALT1_SHA1 (SP 800-56A)
  • HU_KDF_NIST_ALT1_SHA224 (SP 800-56A)
  • HU_KDF_NIST_ALT1_SHA256 (SP 800-56A)
  • HU_KDF_NIST_ALT1_SHA384 (SP 800-56A)
  • HU_KDF_NIST_ALT1_SHA512 (SP 800-56A)

Related links

  • hu_KDFDerive()

    Derives a value of the requested length based on shared secret information, suitable for use as a key value.