secretDerivation

abstract fun secretDerivation(digest: CryptographyAlgorithmId<Digest>, outputSize: BinarySize, salt: ByteArray?, info: ByteArray? = null): SecretDerivation(source)

Returns a SecretDerivation that derives secrets of the given outputSize from input keying material using the digest hash function as the underlying PRF.

The derivation can be strengthened with a non-secret salt in the extract step and bound to a specific context with info in the expand step. When salt is null, a string of zeros equal to the hash output length is used (per RFC 5869).