Struct HkdfSha384 

pub struct HkdfSha384 { /* private fields */ }

HKDF-SHA-384 (RFC 5869).

Built on HmacSha384, so it is served by whichever driver is registered for it; see driver.

Example

let hk = HkdfSha384::new(b"salt", b"input key material");
let mut okm = [0u8; 42];
hk.expand(b"context", &mut okm)?;

// Or keep the pseudorandom key to expand later:
let (prk, _) = HkdfSha384::extract(b"salt", b"input key material");
HkdfSha384::from_prk(&prk)?.expand(b"context", &mut okm)?;

Implementations

impl HkdfSha384

pub const PRK_SIZE: usize = HmacSha384::OUTPUT_SIZE

Size of the pseudorandom key, in bytes.

pub const MAX_OUTPUT_SIZE: usize

Largest output expand can produce, in bytes.

pub fn new(salt: &[u8], ikm: &[u8]) -> Self

Extract a pseudorandom key from ikm with salt.

An empty salt is equivalent to the RFC’s default of PRK_SIZE zeros.

pub fn extract(salt: &[u8], ikm: &[u8]) -> ([u8; 48], Self)

Like new, also returning the pseudorandom key.

pub fn from_prk(prk: &[u8]) -> Result<Self, Error>

Skip the extract step, using prk as the pseudorandom key.

Returns Error::InvalidKey if prk is shorter than PRK_SIZE.

pub fn expand(&self, info: &[u8], okm: &mut [u8]) -> Result<(), Error>

Fill okm with output keying material bound to info.

Returns Error::InvalidInput if okm is longer than MAX_OUTPUT_SIZE.

Trait Implementations

impl Clone for HkdfSha384

fn clone(&self) -> HkdfSha384

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for HkdfSha384

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.