This tool supports HKDF Extract, Expand, and Full (Extract+Expand) workflows for deriving context-specific keys from input keying material.
Key Features
- HKDF-Extract / HKDF-Expand / Full modes
- Multiple input and output encodings
- Configurable info context and output length
- PRK/OKM output with timing info
Steps
- Select mode and hash algorithm.
- Provide IKM/PRK, salt, and info parameters.
- Configure output length and format.
- Run derivation and copy PRK or OKM.
Use Cases
- TLS/session key schedule demonstrations
- Subkey derivation from master keys
- Protocol implementation testing
Notes
- HKDF security depends on strong input keying material.
- Use distinct info contexts for key separation.
- Output length must stay within the algorithm limit.