I've read a lot of information about PRNGs, PRFs and KDFs. As far as I know:

PRNG: The seed for the PRNG must be a uniform string. It transforms a short real uniform string into some bits of pseudo-randomness.

PRF: The PRF gets a uniform key and some additional input and transforms it into a string of pseudo-randomness.

KDF: For example the HKDF scheme uses the hmac as PRF and does not need any uniform input string. It generates some pseudo-randomness.

So far, is that right? I would like to get some additional information about literature on that topcs, in particular further on the inputs of PRF and KDF.

  • $\begingroup$ The reference on KDFs and their security models and guarantees is probably the introductionary paper for HKDF. $\endgroup$ – SEJPM Jul 5 '18 at 8:59
  • $\begingroup$ Hi, yes I already know hat paper. May be I did not understand the fully impact and consequences of that paper. But the most important question to me is: Is it right, that the KDF (f.e. the HKDF-Scheme) does not need any uniform input string? although it would be better, as far as I understood it, if it were? $\endgroup$ – chris000r Jul 8 '18 at 15:22

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.