Missing algorithm: HKDF about webcrypto HOT 8 CLOSED

new version of webcrypto-core allows to create providers in implementing module. HKDF is standard W3 WebCrypto algorithm, I'll add it to webcrypto-core

from webcrypto.

HKDF was added to webcrypto-core
+ [email protected]

from webcrypto.

PeculiarVentures/webcrypto-core#21

from webcrypto.

Nice, I'll start working on a PR.
Please note that nodejs does not have a native HKDF implementation, so I am planning to perform it manually. I am not aware of any side-channel or timing attacks that extract-and-expand algorithms are susceptible to, do you have any words of wisdom about potential gotchas I should worry about?

from webcrypto.

I'd like @peculiar/webcrypto to be NodeJS module without C++ plugins. If you can implement HKDF via NodeJS Crypto API or JS, I think it's ok. We have node-webcrypto-ossl module (it doesn't implements HKDF too) which could implement HKDF via OpenSSL API

@rmhrisk what do you think about it?

from webcrypto.

To make it clear, I am planning to implement HKDF in Javascript.

from webcrypto.

@microshine Please see the comments I left on PeculiarVentures/webcrypto-core#21 - I hit those issues while implementing HKDF.

from webcrypto.

I published updated version + [email protected]

from webcrypto.