HKDF-SHA256 (RFC 5869) key derivation — morie_crypto_hkdf

Phase 3JJJ1. Mirrors the Python morie.crypto.hkdf_sha256(ikm, length=32, salt=b"", info=b"") byte-for-byte. Empty salt defaults to a 32-byte zero-filled salt per RFC 5869 §2.2 (matches Python).

Usage

morie_crypto_hkdf_sha256(ikm, length = 32L, salt = raw(0), info = raw(0))

Arguments

ikm: Input keying material (raw vector).
length: Output length in bytes (1..8160).
salt: Optional salt raw vector. Empty -> zero-fill.
info: Optional context/application info raw vector.

Value

Derived key material as raw vector of length length.

Examples

if (morie_crypto_sodium_available()) {
  out <- morie_crypto_hkdf_sha256("seed", len = 32L, salt = "salt",
                                  info = "ctx")
  length(out)
}
#> [1] 32