kiosk-ops-sdk/com.sarastarquant.kioskops.sdk.crypto/SecureKeyDerivation

SecureKeyDerivation

class SecureKeyDerivation(config: KeyDerivationConfig = KeyDerivationConfig.default())

Secure key derivation using PBKDF2.

This class provides password-based key derivation with configurable parameters for compliance with various security standards.

Usage:

val derivation = SecureKeyDerivation(KeyDerivationConfig.default())
val (key, salt) = derivation.deriveKey("password")

// Later, to derive the same key:
val sameKey = derivation.deriveKeyWithSalt("password", salt)

Constructors

SecureKeyDerivation

constructor(config: KeyDerivationConfig = KeyDerivationConfig.default())

Functions

deriveDeterministic

fun deriveDeterministic(inputMaterial: ByteArray, context: String, salt: ByteArray): ByteArray

Derive a deterministic key from input material using HKDF (RFC 5869) with HMAC-SHA256.

deriveKey

fun deriveKey(password: CharArray): DerivedKeyResult

Derive a cryptographic key from a password.

fun deriveKey(password: String): DerivedKeyResult

Derive a key from a string password (convenience method).

deriveKeyWithSalt

fun deriveKeyWithSalt(password: CharArray, salt: ByteArray): SecretKey

Derive a cryptographic key from a password using an existing salt.

fun deriveKeyWithSalt(password: String, salt: ByteArray): SecretKey

Derive a key from a string password with existing salt.