Update HKDF to support separte Extract and Expand steps
authorMatt Caswell <matt@openssl.org>
Mon, 7 Nov 2016 10:16:57 +0000 (10:16 +0000)
committerMatt Caswell <matt@openssl.org>
Wed, 9 Nov 2016 10:36:54 +0000 (10:36 +0000)
commitd2139cf8dffcfe4a936ef55d25f769b162a8c603
tree683bae690101582b6c7dd4340bb2d02cc38b03dc
parent234b8af4b748311b8856bfd30ae45d187a184465
Update HKDF to support separte Extract and Expand steps

At the moment you can only do an HKDF Extract and Expand in one go. For
TLS1.3 we need to be able to do an Extract first, and the subsequently do
a number of Expand steps on the same PRK.

Reviewed-by: Rich Salz <rsalz@openssl.org>
crypto/kdf/hkdf.c
doc/man3/EVP_PKEY_CTX_set_hkdf_md.pod
include/openssl/kdf.h