EVP_KDF-PVKKDF7ssl
The pvk evp_kdf implementation
Overview
Support for computing the PVK KDF PIN-based KDF through the EVP_KDF API.
The EVP_KDF-PVKKDF algorithm implements a PVK PIN-based key derivation function; it derives a key from a password using a salt.
Identity
"PVKKDF" is the name for this implementation; it can be used with the EVP_KDF_fetch() function.
Supported parameters
The supported parameters are:
- "pass" (
OSSL_KDF_PARAM_PASSWORD) <octet string>
- "salt" (
OSSL_KDF_PARAM_SALT) <octet string>
- "properties" (
OSSL_KDF_PARAM_PROPERTIES) <UTF8 string>
- "digest" (
OSSL_KDF_PARAM_DIGEST) <UTF8 string> -
These parameters work as described in "PARAMETERS" in EVP_KDF(3).
Notes
A typical application of this algorithm is to derive keying material for an encryption algorithm from a password in the "pass" and a salt in "salt".
No assumption is made regarding the given password; it is simply treated as a byte sequence.
The legacy provider needs to be available in order to access this algorithm.
Releases
2 releases since Debian 13 (Trixie); the text changed 1 time.