Cryptographic extraction and key derivation: The HKDF scheme

E831960

academic paper

"Cryptographic Extraction and Key Derivation: The HKDF Scheme" is a foundational cryptography paper by Hugo Krawczyk that introduces and analyzes HKDF, a widely used, provably secure key derivation function based on HMAC.

Try in SPARQL Jump to: Surface forms Disambiguation Statements Elicitation Referenced by

All labels observed (4)

Label	Occurrences
HKDF	4
Cryptographic extraction and key derivation: The HKDF scheme canonical	1
HKDF can be proven secure under standard assumptions on HMAC	1
HKDF is robust to imperfect randomness in input keys	1

How this entity was disambiguated

This entity first appeared as the object of triple T9961807 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.

NED1 Entity disambiguation (via context triple) gpt-5-mini-2025-08-07

Target entity: Cryptographic extraction and key derivation: The HKDF scheme
Context triple: [Hugo Krawczyk, notableWork, Cryptographic extraction and key derivation: The HKDF scheme]

A. Carter–Wegman MACs
Carter–Wegman MACs are a family of message authentication codes that use universal hashing combined with a secret key to provide efficient and provably secure authentication.
B. Merkle–Damgård construction
The Merkle–Damgård construction is a fundamental method for building collision-resistant cryptographic hash functions from fixed-size compression functions, used in many classic hash algorithms like MD5 and SHA-1.
C. Diffie–Hellman key exchange
Diffie–Hellman key exchange is a foundational cryptographic protocol that enables two parties to securely establish a shared secret over an insecure communication channel.
D. Curve25519-based schemes
Curve25519-based schemes are cryptographic protocols and algorithms that use the Curve25519 elliptic curve to provide efficient, high-security public-key operations such as key exchange and digital signatures.
E. The Design of Rijndael
The Design of Rijndael is a technical book by Joan Daemen and Vincent Rijmen that explains the design principles, structure, and security rationale of the Rijndael cipher, which became the Advanced Encryption Standard (AES).
F. None of above. chosen
G. Unsure - the case is ambiguous/there is not enough information to decide.

NED2 Entity disambiguation (via description) gpt-5-mini-2025-08-07

Target entity: Cryptographic extraction and key derivation: The HKDF scheme
Target entity description: "Cryptographic Extraction and Key Derivation: The HKDF Scheme" is a foundational cryptography paper by Hugo Krawczyk that introduces and analyzes HKDF, a widely used, provably secure key derivation function based on HMAC.

A. Carter–Wegman MACs
Carter–Wegman MACs are a family of message authentication codes that use universal hashing combined with a secret key to provide efficient and provably secure authentication.
B. Merkle–Damgård construction
The Merkle–Damgård construction is a fundamental method for building collision-resistant cryptographic hash functions from fixed-size compression functions, used in many classic hash algorithms like MD5 and SHA-1.
C. Diffie–Hellman key exchange
Diffie–Hellman key exchange is a foundational cryptographic protocol that enables two parties to securely establish a shared secret over an insecure communication channel.
D. Curve25519-based schemes
Curve25519-based schemes are cryptographic protocols and algorithms that use the Curve25519 elliptic curve to provide efficient, high-security public-key operations such as key exchange and digital signatures.
E. The Design of Rijndael
The Design of Rijndael is a technical book by Joan Daemen and Vincent Rijmen that explains the design principles, structure, and security rationale of the Rijndael cipher, which became the Advanced Encryption Standard (AES).
F. None of above. chosen

Statements (34)

Predicate	Object
instanceOf	academic paper ⓘ
addresses	multi-key derivation from a single master secret ⓘ use of non-uniform or weakly random keying material ⓘ
analyzes	security of HKDF ⓘ
author	Hugo Krawczyk ⓘ
basedOn	HMAC ⓘ
contribution	formalization of extraction and expansion phases in key derivation ⓘ
defines	extract-then-expand paradigm for key derivation ⓘ
demonstrates	applicability of HKDF in multiple cryptographic protocols ⓘ modularity of HKDF design ⓘ
emphasizes	separation between randomness extraction and key expansion ⓘ
field	cryptography ⓘ information security ⓘ
focusesOn	design of practical and secure key derivation functions ⓘ
goal	to provide a simple and secure KDF for practical deployment ⓘ
impact	HKDF adoption in modern cryptographic libraries ⓘ HKDF adoption in security protocols and standards ⓘ
influenced	standardization of HKDF in IETF protocols ⓘ
introduces	HKDF ⓘ linked to: Cryptographic extraction and key derivation: The HKDF scheme
proposes	HKDF key derivation function ⓘ use of HKDF with different hash functions ⓘ
provides	provable security analysis of HKDF ⓘ
relatedTo	HMAC ⓘ TLS key derivation ⓘ entropy extraction ⓘ key exchange protocols ⓘ pseudorandom functions ⓘ
shows	HKDF can be proven secure under standard assumptions on HMAC ⓘ linked to: Cryptographic extraction and key derivation: The HKDF scheme HKDF is robust to imperfect randomness in input keys ⓘ linked to: Cryptographic extraction and key derivation: The HKDF scheme
topic	HMAC-based key derivation ⓘ cryptographic extraction ⓘ key derivation functions ⓘ
usesConcept	entropy measures of input keys ⓘ random oracle model (in analysis of underlying hash/HMAC) ⓘ

How these facts were elicited

Referenced by (7)

Full triples — surface form annotated when it differs from this entity's canonical label.

Hugo Krawczyk → notableWork → Cryptographic extraction and key derivation: The HKDF scheme ⓘ

WireGuard → usesCryptography → HKDF ⓘ

subject linked to: WireGuard VPN protocol