TLDR InfoSec · STRATEGIES & TACTICS

THE FIPS COMPLIANCE OF HKDF

words.filippo.io8 min read

Summary from the TLDR InfoSec newsletter

HKDF is a key-derivation function used for cryptographic purposes specified in RFC 5869. It can be FIPS-compliant for key-agreement and general purposes with specific guidelines outlined in various NIST standards. HKDF-Extract combines keys and data, while HKDF-Expand serves as a general-purpose key-derivation function.