Expand description
HKDF (RFC 5869) over SHA-1, for interoperability with SHA-1-committed
derivations. The construction is HMAC-based, so SHA-1’s collision
breaks do not reach it (see hmac-sha1’s Security notes); prefer the
SHA-2 parameterizations in new designs.
This interface adds only the SHA-1 prepare steps, parallel to
hkdf-sha2’s: the ikm resource and its import stay hkdf’s, so one
imported secret can parameterize derivations of either hash family.
Functions§
- prepare
- Parameterize an HKDF-SHA-1 derivation. See
hkdf-sha2.prepare. - prepare_
from - Parameterize an HKDF-SHA-1 derivation from another derivation’s
output. See
hkdf-sha2.prepare-from.