]> git.ipfire.org Git - thirdparty/openssl.git/commit
Add HKDF algorithms with fixed digests.
authorDaniel Van Geest <daniel.vangeest@cryptonext-security.com>
Thu, 3 Apr 2025 09:45:20 +0000 (10:45 +0100)
committerPauli <ppzgs1@gmail.com>
Thu, 10 Jul 2025 01:13:21 +0000 (11:13 +1000)
commitd1a8d5a8330a8c9d939e18a22f7382af090cf108
tree6611ccc5af92c19768c2fa05bbddd6415c195d7f
parent162089af7c6894cf65b70be1fc7e7091be482a71
Add HKDF algorithms with fixed digests.

Add HKDF-SHA256, HKDF-SHA384 and HKDF-SHA512 which are versions
of HKDF that have the digest pre-set. The digest cannot be changed
for contexts of these types.

RFC 8619 defines algorithm identifiers for these combinations.
These algorithm identifiers will be used in future features, e.g.
KEMRecipientInfo.

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/27247)
17 files changed:
CHANGES.md
crypto/objects/obj_dat.h
crypto/objects/obj_mac.num
crypto/objects/objects.txt
fuzz/oids.txt
include/openssl/core_names.h.in
include/openssl/obj_mac.h
providers/defltprov.c
providers/fips/fipsprov.c
providers/implementations/exchange/kdf_exch.c
providers/implementations/include/prov/implementations.h
providers/implementations/include/prov/names.h
providers/implementations/kdfs/hkdf.c
test/evp_kdf_test.c
test/recipes/20-test_kdf.t
test/recipes/30-test_evp_data/evpkdf_hkdf.txt
test/recipes/30-test_evp_data/evppkey_kdf_hkdf.txt