WolfSSL
/
wolfssl-examples
mirror of https://github.com/wolfSSL/wolfssl-examples.git
1
0
Fork 0
Code Issues Releases Wiki Activity
wolfssl-examples/crypto/kdf
History
Anthony f09fb7378f Add KDF examples 
HKDF (RFC 5869), PBKDF2 (RFC 2898) and scrypt (RFC 7914), each
verified against its RFC known-answer test vector.
 		2026-07-29 13:39:15 -04:00
..
Makefile Add KDF examples 2026-07-29 13:39:15 -04:00
README.md Add KDF examples 2026-07-29 13:39:15 -04:00
hkdf.c Add KDF examples 2026-07-29 13:39:15 -04:00
pbkdf2.c Add KDF examples 2026-07-29 13:39:15 -04:00
scrypt-kdf.c Add KDF examples 2026-07-29 13:39:15 -04:00

README.md

wolfSSL KDF Examples

Demonstrates the main wolfCrypt key derivation functions, each verified against its RFC known-answer test vector.

  • hkdf.c - HKDF (RFC 5869): extract-then-expand derivation from existing keying material, shown both as separate wc_HKDF_Extract() / wc_HKDF_Expand() steps and as the one-shot wc_HKDF().
  • pbkdf2.c - PBKDF2 (RFC 2898) via wc_PBKDF2(): deriving keys from passwords with a salt and an iteration work factor.
  • scrypt-kdf.c - scrypt (RFC 7914) via wc_scrypt(): memory-hard password-based derivation for stronger resistance to GPU/ASIC attacks.

Use HKDF when the input is already a high-entropy secret (e.g. a DH shared secret); use PBKDF2 or scrypt when the input is a password.

Building wolfSSL

./configure --enable-hkdf --enable-scrypt
make
sudo make install

PBKDF2 is enabled by default (disabled only by NO_PWDBASED).

Building and running the examples

make
./hkdf
./pbkdf2
./scrypt-kdf