Skip to content

Commit 83f5631

Browse files
authored
chore: raise HKDF visibility (#275)
1 parent 92615f3 commit 83f5631

File tree

2 files changed

+7
-2
lines changed

2 files changed

+7
-2
lines changed

client-apis/encrypt.md

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -224,8 +224,12 @@ The algorithm used to derive a data key from the plaintext data key MUST be
224224
the [key derivation algorithm](../framework/algorithm-suites.md#key-derivation-algorithm) included in the
225225
[algorithm suite](../framework/algorithm-suites.md) defined above.
226226
This document refers to the output of the key derivation algorithm as the derived data key.
227-
Note that if the key derivation algorithm is the [identity KDF](../framework/algorithm-suites.md#identity-kdf),
228-
then the derived data key is the same as the plaintext data key.
227+
Note:
228+
229+
- If the key derivation algorithm is the [identity KDF](../framework/algorithm-suites.md#identity-kdf),
230+
then the derived data key is the same as the plaintext data key.
231+
- If the key derivation algorithm is [HKDF](../framework/algorithm-suites.md#hkdf),
232+
the derivation process is described in [HKDF Encryption Key](../transitive-requirements.md#hkdf-encryption-key).
229233

230234
The frame length used in the procedures described below is the input [frame length](#frame-length),
231235
if supplied, or the default if not.

framework/algorithm-suites.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -95,6 +95,7 @@ the algorithm suite's encryption key length MUST equal the algorithm suite's [ke
9595
Specification: [RFC 5869](https://tools.ietf.org/html/rfc5869)
9696

9797
The HMAC-based extract-and-expand key derivation function (HKDF) is a key derivation algorithm.
98+
For the ESDK's usage, the HKDF inputs are described in [Transitive requirements for supported formats](./transitive-requirements.md).
9899

99100
## Supported Formats
100101

0 commit comments

Comments
 (0)