CAPLfunctionSecurityLocalDeriveConcatKdf

SecurityLocalDeriveConcatKdf

Valid for: CANoe DE • CANoe4SW DE

Function Syntax

long SecurityLocalDeriveConcatKdf(dword hashAlgorithm, byte secret[], dword secretLength, byte label[], dword labelLength, dword keyLength, byte outputKey[] [OUT]);

Description

Derive a key using the Concatenation KDF (NIST SP 800-56A).

This is the Concatenation Key Derivation Function as defined in section 5.8.1 of NIST SP 800-56A Rev. 1.

It is the same as the One-step Key Derivation as defined in section 5.8.2.1 of NIST SP 800-56A Rev. 3 with the Concatenation Format for FixedInfo (section 5.8.2.1.1), if the one-step key-derivation method specified in SP 800-56C is used with H = hash.

Note that it is upon the user to ensure that the provided label satisfies the requirements from NIST SP 800-56A.

Parameters

• dword hashAlgorithm
  ID of the hash algorithm to use.
  Available hash algorithm:

  • SHA-256 = 1
  • SHA-384 = 2
  • SHA-512 = 3
  • SHA-224 = 4
  • SM3 = 5

• byte secret[]
  The secret to derive the key from.

• dword secretLength
  The length of the secret.

• byte label[]
  A string identifying the purpose of the derived key (also called OtherInfo or FixedInfo).

• dword labelLength
  The length of the label.

• dword keyLength
  The length of the key to derive.

• byte outputKey[] [OUT]
  Output buffer for the derived key.

Return Values

• 1
  Success. A value of 1 means that the action was successful.

• <= 0
  Error. A value less than or equal to 0 means error.

Example

dword hashAlgorithm = 1; // SHA-256
byte secret[16] = {0xE3, 0xC0, 0x8A, 0x8F, 0x06, 0xC6, 0xE3, 0xAD, 0x95, 0xA7, 0x05, 0x57, 0xB2, 0x3F, 0x75, 0x48};
byte label[3] = {0x01, 0x55, 0x56};
byte derivedKey[16];
long result;
result = SecurityLocalDeriveConcatKdf(hashAlgorithm, secret, elCount(secret), label, elCount(label), elCount(derivedKey), derivedKey);

SecurityLocalSignRsa • SecurityLocalEncryptRsa • SecurityLocalVerifyRsa