A method for iterating the multiple invocations of a pseudorandom function in order to derive the keying material with a required length.
Source(s):
NIST SP 800-108r1