Package zeroecho.sdk.hybrid.derived
package zeroecho.sdk.hybrid.derived
Derived-key utilities for integrating hybrid KEX output with streaming
builders.
This package provides a thin, SDK-level integration layer between hybrid key
exchange (HybridKexContext /
HybridKexExporter) and streaming data-content
builders (for example AES/ChaCha/HMAC builders in
zeroecho.sdk.builders.alg).
The central concept is derived material: purpose-separated keying
bytes (key, optional IV/nonce, optional AAD) derived via HKDF labels. The
material is then applied to an existing builder via applyTo(...)
which returns the same builder instance to preserve fluent pipeline
construction.
Design goals
- Keep cryptographic primitives unchanged; only inject derived parameters.
- Provide safe-by-construction key separation using labels and transcript binding.
- Preserve fluent builder usage by returning the original builder from
applyTo(...).
- Since:
- 1.0
-
ClassesClassDescriptionBuilder-style utility for deriving purpose-separated key material from a hybrid KEX exporter and applying it to streaming algorithm builders.