Module kdf/pbkdf

source · [−]
Expand description

Code related to PBKDF2

Functions

source

(algorithm: Omit<EnforcedPbkdf2Params, "iterations" | "name">, baseKey: Pbkdf2KeyMaterial, length: number): Promise<ArrayBuffer>

Derive a number bits with a given key material

example
const bits = await PBKDF2.deriveBits(
     { hash: "SHA-512" },
     keyMaterial,
     128
);
example
const bits = await keyMaterial.deriveBits(
     { hash: "SHA-512" },
     128
);
source

(algorithm: Omit<EnforcedPbkdf2Params, "iterations" | "name">, baseKey: Pbkdf2KeyMaterial, derivedKeyType: EnforcedHmacKeyGenParams | EnforcedAesKeyGenParams, extractable?: boolean, keyUsages?: KeyUsage[]): Promise<HmacCryptoKey | AesCryptoKeys>

Derive a shared key from PBKDF2 key material

example
const hmacParams: params.EnforcedHmacKeyGenParams = {
     name: Authentication.Alg.Code.HMAC,
     hash: SHA.Alg.Variant.SHA_512,
     length: 512,
};
let key = await PBKDF2.deriveKey(
     { hash: "SHA512" },
     keyMaterial,
     hmacParams
);
example
const hmacParams: params.EnforcedHmacKeyGenParams = {
     name: Authentication.Alg.Code.HMAC,
     hash: SHA.Alg.Variant.SHA_512,
     length: 512,
};
let key = await keyMaterial.deriveKey(
     { hash: "SHA512" },
     hmacParams
);
source

(format: KeyFormat, key: BufferSource, extractable?: boolean): Promise<Pbkdf2ProxiedKeyMaterial>

Generate key material for deriving

example
const keyMaterial = await PBKDF2.generateKeyMaterial("raw", new TextEncoder().encode("could_be_a_little_entropy"));