File tree Expand file tree Collapse file tree 2 files changed +7
-2
lines changed Expand file tree Collapse file tree 2 files changed +7
-2
lines changed Original file line number Diff line number Diff line change @@ -224,8 +224,12 @@ The algorithm used to derive a data key from the plaintext data key MUST be
224
224
the [ key derivation algorithm] ( ../framework/algorithm-suites.md#key-derivation-algorithm ) included in the
225
225
[ algorithm suite] ( ../framework/algorithm-suites.md ) defined above.
226
226
This document refers to the output of the key derivation algorithm as the derived data key.
227
- Note that if the key derivation algorithm is the [ identity KDF] ( ../framework/algorithm-suites.md#identity-kdf ) ,
228
- then the derived data key is the same as the plaintext data key.
227
+ Note:
228
+
229
+ - If the key derivation algorithm is the [ identity KDF] ( ../framework/algorithm-suites.md#identity-kdf ) ,
230
+ then the derived data key is the same as the plaintext data key.
231
+ - If the key derivation algorithm is [ HKDF] ( ../framework/algorithm-suites.md#hkdf ) ,
232
+ the derivation process is described in [ HKDF Encryption Key] ( ../transitive-requirements.md#hkdf-encryption-key ) .
229
233
230
234
The frame length used in the procedures described below is the input [ frame length] ( #frame-length ) ,
231
235
if supplied, or the default if not.
Original file line number Diff line number Diff line change @@ -95,6 +95,7 @@ the algorithm suite's encryption key length MUST equal the algorithm suite's [ke
95
95
Specification: [ RFC 5869] ( https://tools.ietf.org/html/rfc5869 )
96
96
97
97
The HMAC-based extract-and-expand key derivation function (HKDF) is a key derivation algorithm.
98
+ For the ESDK's usage, the HKDF inputs are described in [ Transitive requirements for supported formats] ( ./transitive-requirements.md ) .
98
99
99
100
## Supported Formats
100
101
You can’t perform that action at this time.
0 commit comments