Skip to main content

unwrap_ikm

polymorph_webcrypto_guest::bindings::hkdf

Function unwrap_ikm 

Source 
pub async fn unwrap_ikm(
    input: UnwrapInput,
    options: DeriveOptions,
) -> Result<Ikm, Error>
Expand description

Mint input keying material from unwrapped bytes (see the wrapping interface), subject to import-ikm’s contract: a KDF secret can arrive under a wrapping key and parameterize derivations without its bytes ever being observable. Like import-ikm, this is not a format choice — the bytes are the material. input is consumed.

The grants come from options alone (the W3C Web Cryptography API’s unwrapKey model; its forced non-extractability on HKDF base keys is structural here, as on import-ikm).