constKDF_SHAKE256:KDFFactory
SHAKE256 key derivation function.
A one-stage KDF using the SHAKE256 extendable-output function (XOF) with an output length (Nh) of 64 bytes.
Depends on the following Web Cryptography algorithms being supported in the runtime:
- SHAKE256 (cSHAKE256 without any parameters) digest
This is a factory function that must be passed to the CipherSuite constructor.
Tip
An implementation of this algorithm not reliant on Web Cryptography is also exported by
@panva/hpke-noble