Skip to main content
1 of 4
Maarten Bodewes
  • 94.5k
  • 13
  • 165
  • 319

You don't need a salt (it defaults to a zero length salt) if you generated the session keys using Diffie-Hellman. You should however use a different info (octet) string for each key in the expand part of the function.

The info strings should be static for each key, e.g. an ASCII encoding of "enc" for an encryption key would be a good idea.

Maarten Bodewes
  • 94.5k
  • 13
  • 165
  • 319