Re: [PATCH v3] DH support: add KDF handling support
From: Mat Martineau <hidden>
Date: 2016-08-09 22:39:26
On Sat, 6 Aug 2016, Stephan Mueller wrote:
quoted hunk ↗ jump to hunk
diff --git a/man/keyctl_dh_compute.3 b/man/keyctl_dh_compute.3 index b06d39e..92d358f 100644 --- a/man/keyctl_dh_compute.3 +++ b/man/keyctl_dh_compute.3@@ -11,6 +11,8 @@.\""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" .SH NAME keyctl_dh_compute \- Compute a Diffie-Hellman shared secret or public key +.br +keyctl_dh_compute_kdf \- Derive key from a Diffie-Hellman shared secret .\""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" .SH SYNOPSIS .nf@@ -21,6 +23,10 @@ keyctl_dh_compute \- Compute a Diffie-Hellman shared secret or public key.sp .BI "long keyctl_dh_compute_alloc(key_serial_t " private, .BI "key_serial_t " prime ", key_serial_t " base ", void **" _buffer ");" +.sp +.BI "long keyctl_dh_compute_kdf(key_serial_t " private ", key_serial_t " prime , +.BI "key_serial_t " base ", char *" kdfname ", char *" otherinfo ", +.BI "size_t " otherinfolen ", char *" buffer ", size_t " buflen ");" .\""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" .SH DESCRIPTION .BR keyctl_dh_compute ()@@ -64,6 +70,49 @@ places the data in it. If successful, a pointer to the buffer is placed in.IR *_buffer . The caller must free the buffer. .P +.BR keyctl_dh_compute_kdf () +derives a key from a Diffie-Hellman shared secret according to the protocol +specified in SP800-56A. The Diffie-Hellman computation is based on the same +primitives as discussed +for +.BR keyctl_dy_compute ().
Minor typo: dy->dh Regards, -- Mat Martineau Intel OTC