Skip to main content

9.3. Security Requirements on a KDF

9.3. Security Requirements on a KDF​

The choice of the KDF for HPKE SHOULD be made based on the security level provided by the KEM and, if applicable, by the PSK. The KDF SHOULD at least have the security level of the KEM and SHOULD at least have the security level provided by the PSK.

Last updated on