square / keywhiz

A system for distributing and managing secrets

Home Page:https://square.github.io/keywhiz/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

HKDF makes 3 calls to HSM unnecessarily

stfinney opened this issue · comments

commented

HKDF performs 3 calls to mac update, which is 3 round trips to the HSM. We can reduce this to 1 to get better performance.