Struct HkdfAgreement 

pub struct HkdfAgreement { /* private fields */ }

Normalized RFC 9231 HKDF invocation, with optional XML-supplied IKM.

RFC 9231 section 2.8.1 permits IKM to be absent when known out of band. Salt and KA-Nonce are hexadecimal in this profile, not base64. Parsing neither authorizes execution nor selects a security policy.

Implementations

impl HkdfAgreement

pub fn key_derivation_method(&self) -> &KeyDerivationMethod

Borrow normalized parameters without exposing embedded initial key material.

pub fn derive_key( &self, output_len: usize, external_ikm: Option<&[u8]>, provider: &dyn CryptoProvider, budget: &mut KeyEstablishmentBudget<'_>, ) -> Result<Zeroizing<Vec<u8>>, XmlEncError>

Derive with XML-supplied IKM or an explicit out-of-band request value. Supplying both is an ambiguous request and is rejected, never overridden.

Trait Implementations

impl Debug for HkdfAgreement

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.