[Bug 25468] "CONCAT" KDF only supports deriveBits, not deriveKey

https://www.w3.org/Bugs/Public/show_bug.cgi?id=25468

Mark Watson <watsonm@netflix.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |watsonm@netflix.com

--- Comment #1 from Mark Watson <watsonm@netflix.com> ---
This is a point of confusion that we've discussed before. I guess some
clarification is needed in the specification.

Whilst there are both a deriveKey and deriveBits *methods* there is no 'derive
key' *operation*. The procedure for the deriveKey method uses the same 'derive
bits' operation as the procedure for the deriveBits *method*. The difference is
that in the deriveKey case the returned bits are fed into the import key
operation of the appropriate target algorithm wheras for the deriveBits
operation the bits are returned directly.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Received on Friday, 25 April 2014 23:09:08 UTC