https://kula.tproa.net/tags/key-expansion/ Recent content in Key Expansion on Late Night Thinking Hugo -- gohugo.io en-us © 2020-2025. All rights reserved. Mon, 20 Jul 2020 20:55:02 -0400 https://kula.tproa.net/lnt/2020/07/hkdf-salt-in-key-expansion/ Mon, 20 Jul 2020 20:55:02 -0400 https://kula.tproa.net/lnt/2020/07/hkdf-salt-in-key-expansion/ This weekend I made another addition to age-pkcs11, to follow best practices for HKDF key expansion from the shared secret at the core of the program. I’d been wanting to do this for a while, after reviewing some stuff I wrote about age and looking at the new V1 API there. If you recall back in June when I went into detail on the X25519 cryptography in Age, near the end Age builds up a salt which, when combined with a label and supplied to the HKDF function ties the derived key to a specific context.