HkdfParams
HkdfParams:
object
The HkdfParams dictionary of the Web Crypto API represents the object that should be passed as the algorithm parameter into SubtleCrypto.deriveKey, when using the HKDF algorithm.
Type declaration
hash
hash:
string| {name:string; }
A string or an object containing a single property called name with a string value. It is an identifier for the digest algorithm to use. This should be one of the following:
SHA-256: selects the SHA-256 algorithm.SHA-384: selects the SHA-384 algorithm.SHA-512: selects the SHA-512 algorithm.
info
info:
BufferSource
An ArrayBuffer, a TypedArray, or a DataView representing
application-specific contextual information. This is used to bind the derived key
to an application or context, and enables you to derive different keys for
different contexts while using the same input key material. It's important that
this should be independent of the input key material itself. This property is
required but may be an empty buffer.
name
name:
string
A string. This should be set to HKDF.
salt
salt:
BufferSource
An ArrayBuffer, a TypedArray, or a DataView. The HKDF
specification states that adding salt "adds significantly to the strength of HKDF".
Ideally, the salt is a random or pseudo-random value with the same length as the
output of the digest function. Unlike the input key material passed into deriveKey(),
salt does not need to be kept secret.
Last updated: Sep 30, 2025
