HKDF.h

 
#pragma once
#include <aws/core/utils/Array.h>
#include <aws/s3-encryption/s3Encryption_EXPORTS.h>
 
#include <cstddef>
 
namespace Aws
{
    namespace S3Encryption
    {
        constexpr size_t MESSAGE_ID_BYTES = 28;
        constexpr size_t COMMITMENT_KEY_BYTES = 28;
        constexpr size_t ENCRYPTION_KEY_BYTES = 32;
 
        extern const char *ENCRYPTION_KEY_INFO;
        extern const char *COMMITMENT_KEY_INFO;
        extern const size_t ENCRYPTION_KEY_INFO_LEN;
        extern const size_t COMMITMENT_KEY_INFO_LEN;
 
        AWS_S3ENCRYPTION_API bool derive_encryption_key(const Aws::Utils::CryptoBuffer &data_key, const Aws::Utils::CryptoBuffer &message_id,
                           Aws::Utils::CryptoBuffer &output);
 
 
        AWS_S3ENCRYPTION_API bool derive_commitment_key(const Aws::Utils::CryptoBuffer &data_key, const Aws::Utils::CryptoBuffer &message_id,
                           Aws::Utils::CryptoBuffer &output);
 
        // Compare bytes for equality, in time O(len) regardless of the contents of x and y
        // Returns false if the buffers have different lengths
        AWS_S3ENCRYPTION_API bool constant_time_equal(const Aws::Utils::CryptoBuffer& x, const Aws::Utils::CryptoBuffer& y);
    }
}