Document Action: 'HMAC-based Extract-and-Expand Key Derivation Function (HKDF)' to Informational RFC

The IESG <iesg-secretary@ietf.org> Mon, 08 March 2010 21:15 UTC

From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Subject: Document Action: 'HMAC-based Extract-and-Expand Key Derivation Function (HKDF)' to Informational RFC
Message-Id: <20100308211557.310E43A6ADF@core3.amsl.com>
Date: Mon, 08 Mar 2010 13:15:57 -0800
Cc: Internet Architecture Board <iab@iab.org>, RFC Editor <rfc-editor@rfc-editor.org>
Precedence: list

The IESG has approved the following document:

- 'HMAC-based Extract-and-Expand Key Derivation Function (HKDF) '
   <draft-krawczyk-hkdf-01.txt> as an Informational RFC

This document has been reviewed in the IETF but is not the product of an
IETF Working Group. 

The IESG contact person is Tim Polk.

A URL of this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-krawczyk-hkdf-01.txt

Technical Summary

   This document specifies a simple HMAC-based key derivation function
   (HKDF) which can be used as a building block in various protocols and
   applications.  The KDF is intended to support a wide range of
   applications and requirements, and is conservative in its use of
   cryptographic hash functions.

Working Group Summary

   This document was not the product of any working group.
   However, this KDF is already specified in several standards
   track RFCs produced by IETF wgs, including IKEv2 (RFC 4306),
   PANA (RFC 5191) and EAP-AKA (RFC 5448).

   In addition, the cfrg reviewed this document at the request
   of the sponsoring AD.  The discussion was lively, but focused
   on additional functionality that could be considered.  The cfrg
   did not identify any changes that were required. 

Document Quality

   This KDF is widely implemented and used in the context of
   specific IETF protocols, especially those that rely on IKEv2.

Personnel

   Tim Polk is the Document Shepherd for this document and the 
   Responsible Area Director.

RFC Editor Note

Please make the following substitutions:

Section 1:
OLD
   It is not intended as a call to change existing protocols.
NEW:
   It is not intended as a call to change existing protocols,
   and does not change or update existing specifications using
   this KDF.

Section 2.2:
OLD:
   PRK = HKDF-Extract(salt, IKM)
NEW
   HKDF-Extract(salt, IKM) -> PRK

Section 2.3:
OLD
   OKM = HKDF-Expand(PRK, info, L)
NEW:
   HKDF-Expand(PRK, info, L) -> OKM

Document Action: 'HMAC-based Extract-and-Expand K… The IESG