RFC 5869

"HMAC-based Extract-and-Expand Key Derivation Function (HKDF)", May 2010

Canonical URL:

http://www.rfc-editor.org/rfc/rfc5869.txt
This document is also available in this non-normative format: PDF.

Status:

INFORMATIONAL

Authors:

H. Krawczyk
P. Eronen

Stream:

IETF

Source:

NON WORKING GROUP

Please refer here for any errata for this document. To submit a new errata report, go to the main errata page.

Abstract

This document specifies a simple Hashed Message Authentication Code (HMAC)-based key derivation function (HKDF), which can be used as a building block in various protocols and applications. The key derivation function (KDF) is intended to support a wide range of applications and requirements, and is conservative in its use of cryptographic hash functions. This document is not an Internet Standards Track specification; it is published for informational purposes.

For the definition of Stream, see RFC 4844.