Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Define CKD_SHA256_KDF transformation #213

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Define CKD_SHA256_KDF transformation #213

wants to merge 1 commit into from

Commits on Aug 10, 2024

  1. Define CKD_SHA256_KDF transformation 

    Define CKD_SHA256_KDF transformation to be used with CKM_ECDH1_DERIVE.

Some HSM with FIPS restriction will refuse to derive keys with
CKD_NULL. CKD_SHA256_KDF will do fine though.

Unfortunately this is not implemented on softHSM
(opendnssec/SoftHSMv2#599)
so I provide no test. This was tested fine against Thales DPOD.

Signed-off-by: François Rigault <[email protected]>
    @freedge
    freedge committed Aug 10, 2024
    Configuration menu
    Copy the full SHA
    02a11d7 View commit details
    Browse the repository at this point in the history