Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Recommendation for Key Derivation Using Pseudorandom Functions



Lily Chen


This Recommendation specifies techniques for the derivation of additional keying material from a secret key—either established through a key-establishment scheme or shared through some other manner—using pseudorandom functions: HMAC, CMAC, and KMAC.
Special Publication (NIST SP) - 800-108r1
Report Number


CMAC, HMAC, key derivation, KMAC, pseudorandom function.


Chen, L. (2022), Recommendation for Key Derivation Using Pseudorandom Functions, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online],, (Accessed April 17, 2024)
Created August 17, 2022, Updated November 29, 2022