Closed roman-khimov closed 1 month ago
kdf := hkdf.New(hash, secret, nil, nil). No salt, no app-specific info.
kdf := hkdf.New(hash, secret, nil, nil)
App-specific info and salt used.
Hardcode info, add some salt. Breaking change, but the gateway is not used in production.
Salt is to be stored somewhere nearby, as usual.
Salt is to be stored somewhere
what do u mean - in what storage?
Current Behavior
kdf := hkdf.New(hash, secret, nil, nil)
. No salt, no app-specific info.Expected Behavior
App-specific info and salt used.
Possible Solution
Hardcode info, add some salt. Breaking change, but the gateway is not used in production.
Your Environment