KDFs noble-hashes kdf

HKDF Generator - HMAC-Based Key Derivation

Generate HKDF keys using HMAC-based extract-and-expand for modern protocols like TLS 1.3 and Signal.

hkdf.workspace
4 options
0 bytes UTF-8, Hex, or Base64 input
Options

Secure client-side computation. No data leaves your browser. Privacy Security

Result Output

What Is HKDF?

HKDF (HMAC-based Extract-and-Expand Key Derivation Function) derives keys from input keying material using HMAC in two stages: extract and expand, providing a standardized way to derive cryptographic keys widely adopted in modern security protocols.

Specifications

Output Size Variable
Standard RFC 5869
Standard Year 2010

Use Cases

  • TLS 1.3 key schedule
  • Signal Protocol key derivation
  • IPsec key generation
  • Extracting entropy from DH shared secrets
  • Deriving multiple keys from single secret
!

Security Notice

HKDF is a key derivation tool. Use unique salts where applicable, tune cost parameters for your environment, and avoid entering production secrets in a browser tool.

Related Tools

PBKDF2 KDFs SHAKE128 Hashes SHAKE256 Hashes

Utilities

File Hash Verifier Verify local files against published checksums. Hash Compare Compare expected and actual digest values. Multi Hash Generator Generate common hashes from one input.

Guides

Algorithm Comparison Guide Choose the right primitive for each task. Hash Test Vectors Compare known outputs across common algorithms.

Implementation Notes

Practical usage details for this browser-based HKDF tool.

How to Generate a HKDF derived value

  1. Choose UTF-8, Hex, Base64 input mode.
  2. Enter the text or encoded bytes you want to process.
  3. Adjust the HKDF options if your use case requires non-default settings.
  4. Click Generate HKDF Derived Value and copy the result.

Example Input

Sample input:

abc

Use this sample input, then copy the generated derived value from the result panel.

When Not to Use HKDF

  • Do not use a plain hash or derivation output directly as password storage without the right password-hashing construction and parameters.
  • Do not use it for password hashing when Argon2id, scrypt, or bcrypt is the better fit.

Recommended Alternatives

Review related tools when you need a different output size, security margin, or keyed construction.

Frequently Asked Questions