HKDF is a multi-purpose key derivation function (KDF) based on the HMAC message authentication code. HKDF follows "extract-then-expand" paradigm, where the KDF logically consists of two modules: the first stage takes the input keying material and "extracts" from it a fixed-length pseudorandom key, and then the second stage "expands" this key into several additional, independent pseudorandom keys as the output of the KDF.
Mechanism HKDF is the composition of two functions, HKDF-Extract and HKDF-Expand:
HKDF ( s a l t , I K M , i n f o , L ) = H K D F - E x p a n d ( H K D F - E x t r a c t ( s a l t , I K M ) , i n f o , L ) {\displaystyle \operatorname {HKDF} ({\mathit {salt}},{\mathit {IKM}},{\mathit {info}},L)=\operatorname {HKDF{-}Expand} \!\left(\operatorname {HKDF{-}Extract} ({\mathit {salt}},{\mathit {IKM}}),{\mathit {info}},L\right)}
… excerpt ends here. Continue reading the full article.
