Struct HkdfBuilder 

pub struct HkdfBuilder<'a> { /* private fields */ }

HKDF key-derivation builder (RFC 5869).

let okm = HkdfBuilder::new(&sha256)
    .key(ikm)
    .salt(salt)
    .info(info)
    .derive_to_vec(32)?;

Implementations

impl<'a> HkdfBuilder<'a>

pub fn new(digest: &'a DigestAlg) -> Self

Create an HKDF builder bound to digest.

The mode defaults to ExtractAndExpand.

pub fn key(self, key: &'a [u8]) -> Self

Set the input keying material (IKM).

pub fn salt(self, salt: &'a [u8]) -> Self

Set the salt (optional; defaults to zero-length within OpenSSL).

pub fn info(self, info: &'a [u8]) -> Self

Set the context/application-specific information bytes.

pub fn mode(self, mode: HkdfMode) -> Self

Override the default extract-and-expand mode.

pub fn derive(self, out: &mut [u8]) -> Result<(), ErrorStack>

Derive key material, writing into out.

Errors

pub fn derive_to_vec(self, len: usize) -> Result<Vec<u8>, ErrorStack>

Derive len bytes of key material, returning them in a freshly allocated Vec<u8>.

Errors