Deriving AES/HMAC symmetric key from any AES/HMAC symmetric key

To derive AES/HMAC symmetric key from AES/HMAC

An AES/HMAC symmetric key can be derived from another AES/HMAC symmetric key, also called as Master Key. The derived key is generated in the CipherTrust Manager based on the HMAC based key derivation function popularly known as HKDF (HMAC based key derivation function).

Important Notes

1. I_C_CreateKey is the API used for both normal key generation as well as for key derivation using HKDF. If HKDF related properties are not set then this API creates a normal key.

2. Master Key name HKDF(IKMKeyName) is mandatory. If derivation algorithm is not mentioned then default algorithm will be used by the CipherTrust Manager.

3. Versioned keys are not supported. For more details , refer to the CADP for C CAPI API Guide.