wycheproof icon indicating copy to clipboard operation
wycheproof copied to clipboard

Published 20 hours ago • verified publisher icon C2SP

Can HKDF accept empty IKM?

Open wangweij opened this issue 10 months ago • 3 comments

I know IKM is the source of entropy and it's not safe to use an empty IKM. However, in my opinion it should still be legal. Including empty IKMs in the test suite can reveal implementation errors. For example, Java's SecretKeySpec class does not allow empty keys so it cannot be used to implement HKDF.

wangweij avatar Apr 09 '24 15:04 wangweij