Skip to content

Add OpenSSL::KDF.derive to expose EVP_KDF in OpenSSL 3.0 #906

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 4 commits into
base: master
Choose a base branch
from

Conversation

rhenium
Copy link
Member

@rhenium rhenium commented Jul 4, 2025

Closes #892

@rhenium rhenium mentioned this pull request Jul 4, 2025
rhenium added 4 commits July 24, 2025 19:42
This list was originally in alphabetical order. Sort it again.

This change should be safe since the .rb sources should only depend on
the extension and not each other.
Provide a useful function to make a heap-allocated array of OSSL_PARAM
from Enumerable. OSSL_PARAM is a new type added in OpenSSL 3.0 and used
by various new APIs for taking arbitrary parameters.

The next patch will use this with EVP_KDF to implement
OpenSSL::KDF.derive.
Expose EVP_KDF_derive() added in OpenSSL 3.0. OpenSSL apparently plans
to implement new algorithms through this interface only from now on.
For example, the Argon2 password hashing algorithm added in OpenSSL 3.2
is available exclusively through this API.

This is a low-level and minimum method to interact with the API. You
will have to carefully read the relevant man pages to use this
correctly.
@rhenium rhenium force-pushed the ky/kdf-evp-kdf-derive branch from 7ef5fbf to cac4b64 Compare July 24, 2025 10:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add Support for Argon2
1 participant