latchset / kryoptic

a pkcs#11 software token written in Rust
GNU General Public License v3.0
10 stars 4 forks source link

Implement PBKDF2 with truncated hashes such as `CKP_PKCS5_PBKD2_HMAC_SHA512_224` #55

Open Jakuje opened 4 months ago

Jakuje commented 4 months ago

No truncated prf's? such as CKP_PKCS5_PBKD2_HMAC_SHA512_224 defined in the pkcs11 specs? We don't have these as separate truncated hmacs though ...

But if the semantics is just truncating the hmacs, what would it take to implement them too?

In any case, we will need some test vectors and clarification if they are acceptable or not in FIPS.

_Originally posted by @Jakuje in https://github.com/latchset/kryoptic/pull/52#discussion_r1609597664_