micro509/kdf

Optional byte-oriented Argon2 key derivation with explicit resource limits. Import this entrypoint directly. Certificate APIs do not load it.

Functions

• deriveArgon2 — Derives raw Argon2 bytes after validating parameters and resource ceilings.

Types

• Argon2Algorithm — Argon2id for new uses, or Argon2d for compatibility with existing formats.
• Argon2Backend — Trusted, explicitly supplied implementation for the exact requested algorithm
• Argon2ErrorCode — Stable failures without password, salt, or backend exception content.
• Argon2Input — Exact derivation inputs. Password encoding and format preprocessing belong to the caller.
• Argon2Limits — Per-invocation ceilings, checked before copying inputs or calling the backend.
• Argon2Options — Resource policy and optional external implementation for deriveArgon2.
• Argon2Result — Derived bytes or a typed error. Successful output belongs to the caller.
• Argon2Version — Argon2 versions used by KDBX. The native backend supports only 0x13.