Hi Kevin,
I implemented a prototype for HKDF derivation with SunPKCS11. This was
tested with the NSS Software Token v3.90, both in FIPS and non-FIPS
configurations. Testing includes the 7 vectors in RFC 5869 (*),
derivation of a DH base key, derivation of a ECDH base key and use of
derived ke
Good to hear that plan,I wonder are there also special considerations for password based algorithms? One of the major annoyances are the different encoding formats (mostly about bytes derived from strings, maybe padding). Would be good if this can be an parameter.In regard