Hkdf Generator

Both PBKDF2 and HKDF are Key Derivation Functions (KDFs). They both take some input material and output a cryptographic key. However, they solve two entirely different problems.

• PBKDF2 is for Passwords: It is designed for low-entropy inputs like human passwords. Its goal is to be intentionally slow (key stretching) to prevent brute-force attacks.
• HKDF is for Protocols: It is designed to take a high-entropy, but unevenly distributed input (like a shared secret generated from an ECDH key exchange) and perfectly "smooth it out" into multiple secure cryptographic keys. HKDF is extremely fast.

HKDF operates in two distinct mathematical phases:

1. Extract: Takes the initial key material and "extracts" a fixed-length pseudorandom key (PRK) using a cryptographic salt. This acts as a cryptographic mixer, concentrating the entropy.
2. Expand: Takes that PRK and "expands" it into multiple keys using specific info strings. For example, passing the string "client_write_key" derives one AES key, and passing "server_write_key" derives a completely different AES key, both from the exact same master secret.

Because of its speed and mathematical properties, HKDF is a core component of modern secure protocols:

• TLS 1.3: Uses HKDF extensively to derive the session keys that secure the modern web.
• Signal Protocol: Uses HKDF as part of its ratcheting mechanism to derive new encryption keys for every single message sent.

When calling the Expand phase, the Info parameter is technically optional, but omitting it is a serious architectural failure in complex protocols.

The Info string ensures context separation. If two different subsystems (e.g., encryption and MAC generation) both request a key from the same master secret without providing a unique Info string, they will receive the exact same key. This violates cryptographic isolation principles.