out1, out2 = HKDF(in1, in2)` */
| 230 | |
| 231 | /* out1, out2 = HKDF(in1, in2)` */ |
| 232 | static void hkdf_two_keys(struct secret *out1, struct secret *out2, |
| 233 | const struct secret *in1, |
| 234 | const void *in2, size_t in2_size) |
| 235 | { |
| 236 | /* BOLT #8: |
| 237 | * |
| 238 | * * `HKDF(salt,ikm)`: a function defined in `RFC 5869`<sup>[3](#reference-3)</sup>, |
| 239 | * evaluated with a zero-length `info` field |
| 240 | * * All invocations of `HKDF` implicitly return 64 bytes |
| 241 | * of cryptographic randomness using the extract-and-expand |
| 242 | * component of the `HKDF`. |
| 243 | */ |
| 244 | struct secret okm[2]; |
| 245 | |
| 246 | SUPERVERBOSE("# HKDF(0x%s,%s%s)", |
| 247 | tal_hexstr(tmpctx, in1, sizeof(*in1)), |
| 248 | in2_size ? "0x" : "zero", |
| 249 | tal_hexstr(tmpctx, in2, in2_size)); |
| 250 | BUILD_ASSERT(sizeof(okm) == 64); |
| 251 | hkdf_sha256(okm, sizeof(okm), in1, sizeof(*in1), in2, in2_size, |
| 252 | NULL, 0); |
| 253 | *out1 = okm[0]; |
| 254 | *out2 = okm[1]; |
| 255 | } |
| 256 | |
| 257 | static void le64_nonce(unsigned char *npub, u64 nonce) |
| 258 | { |
no test coverage detected