Class HKDFBytesGenerator

  • All Implemented Interfaces:
    DerivationFunction

    public class HKDFBytesGenerator
    extends java.lang.Object
    implements DerivationFunction
    HMAC-based Extract-and-Expand Key Derivation Function (HKDF) implemented according to IETF RFC 5869, May 2010 as specified by H. Krawczyk, IBM Research & P. Eronen, Nokia. It uses a HMac internally to compute de OKM (output keying material) and is likely to have better security properties than KDF's based on just a hash function.
    • Constructor Summary

      Constructors 
      Constructor Description
      HKDFBytesGenerator​(Digest hash)
      Creates a HKDFBytesGenerator based on the given hash function.
    • Constructor Detail

      • HKDFBytesGenerator

        public HKDFBytesGenerator​(Digest hash)
        Creates a HKDFBytesGenerator based on the given hash function.
        Parameters:
        hash - the digest to be used as the source of generatedBytes bytes
    • Method Detail

      • extractPRK

        public byte[] extractPRK​(byte[] salt,
                                 byte[] ikm)
        Performs the extract part of the key derivation function.
        Parameters:
        salt - the salt to use
        ikm - the input keying material
        Returns:
        the PRK as KeyParameter
      • getDigest

        public Digest getDigest()