HKDF (RFC 5869) turns one high-entropy secret into as many independent keys as you need: it extracts a pseudorandom key with the salt, then expands it using the info string as context. TLS 1.3, Signal, and Noise all build on it. HKDF is not a password hash — the input must already be random. Change the info string and you get a completely different key from the same secret.
0 chars; 0 lines
0 chars; 0 lines
marduc812
© 202620260902_acd5cb6