Package Exports

derive-key

This package does not declare an exports field, so the exports above have been automatically detected and optimized by JSPM instead. If any package subpath is missing, it is recommended to post an issue to the original package (derive-key) to support the "exports" field. If that is not possible, create a JSPM override to customize the exports field for this package.

Readme

derive-key

Derive a named key from a high-entropy master key

npm install derive-key

Usage

const derive = require('derive-key')
const masterKey = crypto.randomBytes(32) // make sure this is high-entropy master key, eg. from a CSPRNG

const key = derive('a namespace', masterKey, 'my-named-key')

console.log('the derived key is:', key)

API

`outputKey = derive(namespace, masterKey, name, [outputKey])`

Derive a named key from a 32 byte high-entropy master key. This can be 32-bytes of cryptographically secure randomness, eg from a CSPRNG. Do NOT use low entropy soruces such a passwords, passphrases or randomness from a predictable RNG.

The namespace should be an ascii string (fx your application name) and name can be a buffer or string reflecting the name of the key you want to derive.

Optionally you can pass in the output key parameter and the result will be written into this buffer instead of a new buffer being allocated internally.

License

MIT