New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add support for SHA-based KDFs for ECDH #92

Open

beamer159 opened this issue Jun 9, 2022 · 1 comment

beamer159 commented Jun 9, 2022 •

edited

Loading

PKCS11 defines the following EC KDFs:

CKD_NULL
CKD_SHA1_KDF
CKD_SHA224_KDF
CKD_SHA256_KDF
CKD_SHA384_KDF
CKD_SHA512_KDF

It looks like the only currently supported KDF is CKD_NULL:

rust-cryptoki/cryptoki/src/mechanism/elliptic_curve.rs

Lines 46 to 51 in 617efa8

    
           impl EcKdfType { 
        
               /// The null transformation. The derived key value is produced by 
        
               /// taking bytes from the left of the agreed value. The new key 
        
               /// size is limited to the size of the agreed value. 
        
               pub const NULL: EcKdfType = EcKdfType { val: CKD_NULL }; 
        
           }

Member

ionut-arm commented Jun 10, 2022

Hey! Thanks for the request - any chance you'd be up to contribute those?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment