Recommendation for Existing Application-Specific Key Derivation Functions

Dang, Quynh

doi:https://doi.org/10.6028/NIST.SP.800-135r1

SP 800-135 Rev. 1

Recommendation for Existing Application-Specific Key Derivation Functions

Documentation Topics

Date Published: December 2011

Supersedes: SP 800-135 (12/23/2010)

Author(s)

Quynh Dang (NIST)

Abstract

Cryptographic keys are vital to the security of internet security applications and protocols. Many widely-used internet security protocols have their own application-specific Key Derivation Functions (KDFs) that are used to generate the cryptographic keys required for their cryptographic functions. This Recommendation provides security requirements for those KDFs.

Keywords

shared secret; Diffie-Hellman (DH) key exchange; hash function; Key Derivation Function (KDF); Hash-based Key Derivation Function; Randomness Extraction; Key expansion; Pseudorandom Function (PRF); HMAC; ANS X9.42-2001; ANS X9.63-2001; IKE; SSH; TLS; SRTP; Cryptographic key; SNMP and TPM.

Control Families

None selected

Documentation

Publication:
SP 800-135 Rev. 1 (DOI)
Local Download

Supplemental Material:
Informative Note (09-19-2016) (pdf)

Document History:
12/23/11: SP 800-135 Rev. 1 (Final)

Topics

Security and Privacy
key management

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

SP 800-135 Rev. 1

Recommendation for Existing Application-Specific Key Derivation Functions

Author(s)

Abstract

Keywords

Control Families

Documentation

Topics