iaik.security.ec.common

Class HKDF

java.lang.Object

iaik.security.ec.common.HKDF

All Implemented Interfaces:

KeyDerivationFunction

public final class HKDF
extends Object
implements KeyDerivationFunction

Implements the HKDF key derivation function according to [1]. References:

[1] RFC 5869, HMAC-based Extract-and-Expand Key Derivation Function (HKDF), see RFC 5869

Constructor Summary

Constructors

Constructor and Description
HKDF() Default constructor.

Method Summary

Modifier and Type	Method and Description
byte[]	engineGenerateKey(byte[] secret) Derives the symmetric key from a shared secret and returns it.
byte[]	engineGenerateKey(byte[] secret, int keyLength) Derives the symmetric key from a shared secret and returns it.
void	engineInit(KDFParameterSpec params) Initializes this KDF.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

HKDF

public HKDF()

Default constructor.

Method Detail

engineInit

public void engineInit(KDFParameterSpec params)

Description copied from interface: KeyDerivationFunction

Initializes this KDF.

Specified by:

engineInit in interface KeyDerivationFunction

Parameters:

params - the KDF parameters

engineGenerateKey

public byte[] engineGenerateKey(byte[] secret)

Description copied from interface: KeyDerivationFunction

Derives the symmetric key from a shared secret and returns it.

Specified by:

engineGenerateKey in interface KeyDerivationFunction

Parameters:

secret - the secret, from which the key is going to be derived

Returns:

a byte array holding the derived key

engineGenerateKey

public byte[] engineGenerateKey(byte[] secret,
                                int keyLength)

Description copied from interface: KeyDerivationFunction

Derives the symmetric key from a shared secret and returns it.

Specified by:

engineGenerateKey in interface KeyDerivationFunction

Parameters:

secret - the secret, from which the key is going to be derived

keyLength - the length of the key in bits

Returns:

a byte array holding the derived key