openssl: Add a prf+ implementation based on OpenSSL's HKDF implementation

The HKDF-Expand() function defined in RFC 5869 is basically the same as IKEv2's prf+(), so we can use the former to implement the latter. However, we can only support HMAC-based PRFs this way, which should be fine as others are rarely used.
2022-04-14 18:54:24 +02:00
parent 9e228de60a
commit 2b9b579af9
4 changed files with 227 additions and 0 deletions
@@ -33,6 +33,7 @@ libstrongswan_openssl_la_SOURCES = \
 	openssl_pkcs12.c openssl_pkcs12.h \
 	openssl_rng.c openssl_rng.h \
 	openssl_hmac.c openssl_hmac.h \
+	openssl_kdf.c openssl_kdf.h \
 	openssl_aead.c openssl_aead.h \
 	openssl_x_diffie_hellman.c openssl_x_diffie_hellman.h \
 	openssl_ed_private_key.c openssl_ed_private_key.h \