Re: hash_hkdf() signature
| From: | Yasuo Ohgaki | Date: | Wed, 08 Feb 2017 09:36:59 +0000 |
| Subject: | Re: hash_hkdf() signature | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-98257@lists.php.net to get a copy of this message | ||
Forgot to mention the most important.
On Wed, Feb 8, 2017 at 6:16 PM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
> Is that enough of a downside to dismiss an argument for better security?
> Maybe
I suppose so.
It is very clear that "salt" is the most important for derived key security,
"info" is next, then "length".
Regards,
--
Yasuo Ohgaki
yohgaki@ohgaki.net