Struct Hkdf

pub struct Hkdf<H: HashFunction, const S: usize = 16> { /* private fields */ }

HKDF implementation using any hash function

Implementations

impl<H: HashFunction + Clone, const S: usize> Hkdf<H, S>

where Salt<S>: HkdfCompatible,

pub fn extract(salt: Option<&[u8]>, ikm: &[u8]) -> Result<Zeroizing<Vec<u8>>>

HKDF-Extract

pub fn expand( prk: &[u8], info: Option<&[u8]>, length: usize, ) -> Result<Zeroizing<Vec<u8>>>

HKDF-Expand

pub fn derive( salt: Option<&[u8]>, ikm: &[u8], info: Option<&[u8]>, length: usize, ) -> Result<Zeroizing<Vec<u8>>>

Full HKDF (Extract + Expand) with warm-up

Trait Implementations

impl<H: Clone + HashFunction, const S: usize> Clone for Hkdf<H, S>

fn clone(&self) -> Hkdf<H, S>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<H: HashFunction, const S: usize> Drop for Hkdf<H, S>

fn drop(&mut self)

Executes the destructor for this type.

impl<H: HashFunction + Clone, const S: usize> KeyDerivationFunction for Hkdf<H, S>

where Salt<S>: HkdfCompatible,

type Algorithm = HkdfAlgorithm<H>

The algorithm this KDF implements

type Salt = Salt<S>

Salt type with appropriate validation

fn new() -> Self

Creates a new instance of the KDF with default parameters

fn derive_key( &self, input: &[u8], salt: Option<&[u8]>, info: Option<&[u8]>, length: usize, ) -> Result<Vec<u8>>

Derives a key using the KDF parameters

fn builder(&self) -> impl KdfOperation<'_, Self::Algorithm>

Creates a builder for fluent API usage - FIXED: Elided lifetime

fn generate_salt<R: RngCore + CryptoRng>(rng: &mut R) -> Self::Salt

Generate a random salt with appropriate size

fn security_level() -> SecurityLevel

Returns the security level of the KDF in bits

impl<H: HashFunction, const S: usize> ParamProvider for Hkdf<H, S>

where Salt<S>: HkdfCompatible,

type Params = HkdfParams<S>

The parameter type associated with this algorithm

fn with_params(params: Self::Params) -> Self

Creates a new instance with the specified parameters

fn params(&self) -> &Self::Params

Returns the current parameters

fn set_params(&mut self, params: Self::Params)

Updates the parameters

impl<H: HashFunction + Clone, const S: usize> SecureZeroingType for Hkdf<H, S>

where Salt<S>: HkdfCompatible,

fn zeroed() -> Self

Create a zeroed instance

fn secure_clone(&self) -> Self

Create a secure clone that preserves security properties

impl<H: HashFunction, const S: usize> Zeroize for Hkdf<H, S>

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.