hkdf_sha384.h File Reference

HKDF-SHA384 (RFC 5869) and TLS 1.3 HKDF-Expand-Label (RFC 8446 sec 7.1). More...

#include "protocore_config.h"

Go to the source code of this file.

Detailed Description

HKDF-SHA384 (RFC 5869) and TLS 1.3 HKDF-Expand-Label (RFC 8446 sec 7.1).

The SHA-384 instantiation of the same two constructions crypto/kdf/hkdf.h runs on SHA-256. RFC 8446 sec 7.1 keys the whole schedule off the cipher suite's hash, so the SHA-384 suites (TLS_AES_256_GCM_SHA384) need every Extract, Expand and Expand-Label at a 48-octet block. A thin layer over the HmacSha384Ns entries rather than a second HMAC.

Pure, zero heap, host-tested against the RFC 5869 construction re-run at SHA-384's width.

Author

Douglas Quigg (dstroy0)

Date

2026

Definition in file hkdf_sha384.h.