Lines Matching +full:key +full:- +full:up
5 EVP_KDF-HKDF - The HKDF EVP_KDF implementation
11 The EVP_KDF-HKDF algorithm implements the HKDF key derivation function.
12 HKDF follows the "extract-then-expand" paradigm, where the KDF logically
14 and "extracts" from it a fixed-length pseudorandom key K. The second stage
15 "expands" the key K into several additional pseudorandom keys (the output
33 =item "key" (B<OSSL_KDF_PARAM_KEY>) <octet string>
55 up for HKDF will perform an extract followed by an expand operation in one go.
56 The derived key returned will be the result after the expand operation. The
57 intermediate fixed-length pseudorandom key K is not returned.
59 In this mode the digest, key, salt and info values must be set before a key is
65 operation. The value returned will be the intermediate fixed-length pseudorandom
66 key K. The I<keylen> parameter must match the size of K, which can be looked
67 up by calling EVP_KDF_CTX_get_kdf_size() after setting the mode and digest.
69 The digest, key and salt values must be set before a key is derived otherwise
75 operation. The input key should be set to the intermediate fixed-length
76 pseudorandom key K returned from a previous extract operation.
78 The digest, key and info values must be set before a key is derived otherwise
95 the intermediate fixed-length pseudorandom key otherwise an error will occur.
96 For that mode, the fixed output size can be looked up by calling EVP_KDF_CTX_get_kdf_size()
101 This example derives 10 bytes using SHA-256 with the secret key "secret",
141 L<EVP_KDF-TLS13_KDF(7)>
149 Copyright 2016-2021 The OpenSSL Project Authors. All Rights Reserved.