Cryptographic Extraction and Key Derivation: The HKDF Scheme

By Hugo Krawczyk. IACR Cryptology ePrint Archive, 2010

472 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Introduction to Modern Cryptography, Second Edition (2014, unknown): “See [109] for a formal treatment of the problem and an analysis of HKDF.”
A Formal Security Analysis of the Signal Messaging Protocol (2017, methodology): “Signal uses key derivation functions in two different ways, as shown in Figure 7, applying either HMAC - SHA256 [6] or HKDF [49] using SHA256 as indicated.”
More efficient oblivious transfer and extensions for faster secure computation (2013, unknown): “We stress that the goal of our performance measurements is to highlight the eﬃciency gains of our improved OT protocols, but not to provide a comparison between Yao’s garbled circuits and the GMW protocol.”
This Paper Is Included in the Proceedings of the 12th Usenix Symposium on Operating Systems Design and Implementation (osdi '16). Unobservable Communication over Fully Untrusted Infrastructure Unobservable Communication over Fully Untrusted Infrastructure (unknown): “This master key is used to derive two additional keys, k L and k E , with a key derivation scheme [76].”