Recommendation for Existing Application-Specific Key Derivation Functions

Published

December 23, 2010

Author(s)

Quynh H. Dang

Abstract

[Superseded by NIST SP 800-135 Rev. 1, "Recommendation for Existing Application-Specific Key Derivation Functions" (December 2011), http://www.nist.gov/manuscript-publication-search.cfm?pub_id=910283] Cryptographic keys are vital to the security of internet security applications and protocols. Many widely-used internet security protocols have their own application-specific Key Derivation Functions (KDFs) that are used to generate the cryptographic keys required for their cryptographic functions. This Recommendation provides security requirements for those KDFs.

Citation

Special Publication (NIST SP) - 800-135

Report Number

800-135

NIST Pub Series

Special Publication (NIST SP)

Pub Type

NIST Pubs

Superceded By Publication

Recommendation for Existing Application-Specific Key Derivation Functions

Download Paper

DOI Link

Keywords

Cryptographic key, shared secret, Diffie-Hellman (DH) key exchange, hash function, Key Derivation Function (KDF), Hash-based Key Derivation Function, Randomness Extraction, Key Expansion, Pseudorandom Function (PRF), HMAC, ANS X9.42-2001, ANS X9.63-2001, IKE, SSH, TLS, SRTP, SNMP, TPM

Citation

Dang, Q. (2010), Recommendation for Existing Application-Specific Key Derivation Functions, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.800-135 (Accessed October 1, 2025)