Contains classes for key derivation (KDF) with PQ support.

using WvdS.System.Security.Cryptography.KeyDerivation;
 
byte[] sharedSecret = /* from ML-KEM */;
byte[] salt = RandomNumberGenerator.GetBytes(32);
 
// HKDF for session keys
byte[] aesKey = KeyDerivationExtensions.DeriveKey(
    sharedSecret,
    outputLength: 32,
    salt: salt,
    info: Encoding.UTF8.GetBytes("AES-256-GCM"));
 
// Hybrid key derivation
byte[] hybridKey = KeyDerivationExtensions.DeriveHybridKey(
    classicSecret: ecdhSecret,
    pqSecret: mlKemSecret,
    outputLength: 32);

• KeyExchange Namespace
• Encryption Namespace
• API Overview

Wolfgang van der Stille @ EMSR DATA d.o.o. - Post-Quantum Cryptography Professional