kdf

Documentation

Overview

Package kdf implements the key derivation functions defined in NIST SP-800-108.

Index

• func CounterModeKey(prf PRF, key, label, context []byte, bitLength uint32) []byte
• func FeedbackModeKey(prf PRF, key, label, context, iv []byte, bitLength uint32, useCounter bool) []byte
• func PipelineModeKey(prf PRF, key, label, context []byte, bitLength uint32, useCounter bool) []byte
• type PRF
  • func NewHMACPRF(h crypto.Hash) PRF

Functions

func CounterModeKey

func CounterModeKey(prf PRF, key, label, context []byte, bitLength uint32) []byte

CounterModeKey derives a key of the specified length using the counter mode function defined in NIST SP-800-108, using the supplied PRF, secret key and other input parameters.

func FeedbackModeKey

func FeedbackModeKey(prf PRF, key, label, context, iv []byte, bitLength uint32, useCounter bool) []byte

FeebackModeKey derives a key of the specified length using the feedback mode function defined in NIST SP-800-108, using the supplied PRF, secret key and other input parameters.

The useCounter argument specifies whether the iteration counter should be used as an input to the PRF.

func PipelineModeKey

func PipelineModeKey(prf PRF, key, label, context []byte, bitLength uint32, useCounter bool) []byte

PipelineModeKey derives a key of the specified length using the double-pipeline iteration mode function defined in NIST SP-800-108, using the supplied PRF, secret key and other input parameters.

The useCounter argument specifies whether the iteration counter should be used as an input to the PRF.

Types

type PRF

type PRF interface {
	// Len returns the length of this PRF.
	Len() uint32

	// Run computes bytes for the supplied seed and input value.
	Run(s, x []byte) []byte
}

PRF represents a pseudorandom function, required by the key derivation functions.

func NewHMACPRF

func NewHMACPRF(h crypto.Hash) PRF

NewHMACPRF creates a new HMAC based PRF using the supplied digest algorithm.