WvdS.System.Security.Cryptography.KeyDerivation Namespace

Contains classes for key derivation (KDF) with PQ support.

Classes

Class	Description
KeyDerivationExtensions	KDF functions (HKDF, PBKDF2, Argon2id)
HybridKeyMaterial	Container for derived keys
TlsKeyMaterial	TLS-style key material
Tls13KeySchedule	TLS 1.3 key schedule

Supported KDFs

Function	Standard	Usage
HKDF	RFC 5869¹⁾	Session keys from shared secret
PBKDF2	RFC 8018²⁾	Password-based keys
Argon2id	RFC 9106³⁾	Memory-hard KDF

Example

using WvdS.System.Security.Cryptography.KeyDerivation;
 
byte[] sharedSecret = /* from ML-KEM */;
byte[] salt = RandomNumberGenerator.GetBytes(32);
 
// HKDF for session keys
byte[] aesKey = KeyDerivationExtensions.DeriveKey(
    sharedSecret,
    outputLength: 32,
    salt: salt,
    info: Encoding.UTF8.GetBytes("AES-256-GCM"));
 
// Hybrid key derivation
byte[] hybridKey = KeyDerivationExtensions.DeriveHybridKey(
    classicSecret: ecdhSecret,
    pqSecret: mlKemSecret,
    outputLength: 32);

Inhaltsverzeichnis

WvdS.System.Security.Cryptography.KeyDerivation Namespace

Classes

Supported KDFs

Example

See Also