6 releases (3 breaking)

0.4.2 Oct 26, 2023
0.4.1 Dec 10, 2021
0.3.0 Nov 18, 2021
0.2.0 Nov 18, 2021
0.1.0 Mar 31, 2021

#487 in Cryptography

Download history 206/week @ 2023-11-26 37/week @ 2023-12-03 84/week @ 2023-12-10 23/week @ 2023-12-17 39/week @ 2023-12-24 298/week @ 2023-12-31 227/week @ 2024-01-07 236/week @ 2024-01-14 196/week @ 2024-01-21 37/week @ 2024-01-28 61/week @ 2024-02-04 59/week @ 2024-02-11 112/week @ 2024-02-18 250/week @ 2024-02-25 119/week @ 2024-03-03 30/week @ 2024-03-10

516 downloads per month
Used in 3 crates (2 directly)

MIT license

720KB
1.5K SLoC

rust-openssl-kdf

Wrappers for the KDF functionality of OpenSSL.

This is a wrapper around difference KDF implementations in OpenSSL. At this moment, it supports the EVP_KDF functionality as backported into Fedora/RHEL.

This implements Rust wrappers for the EVP_KDF functionality in OpenSSL, among which is KBKDF, as specified in NIST SP800-108.

Example use (KBKDF in Counter mode with HMAC-SHA256 as PRF)

use openssl_kdf::{KdfArgument, KdfKbMode, KdfMacType, KdfType, perform_kdf};
use openssl::hash::MessageDigest;

let args = [
    &KdfArgument::KbMode(KdfKbMode::Counter),
    &KdfArgument::Mac(KdfMacType::Hmac(MessageDigest::sha256())),
    // Set the salt (called "Label" in SP800-108)
    &KdfArgument::Salt(&[0x12, 0x34]),
    // Set the kb info (called "Context" in SP800-108)
    &KdfArgument::KbInfo(&[0x9a, 0xbc]),
    // Set the key (called "Ki" in SP800-108)
    &KdfArgument::Key(&[0x56, 0x78]),
];

let key_out = perform_kdf(KdfType::KeyBased, &args, 20).unwrap();

Dependencies

~1.9–2.7MB
~60K SLoC