SecureD Futures (v2.0)

[sarn]

On Monday, 28 May 2018 at 02:25:20 UTC, Adam Wilson wrote:
> I like it. But it does require more space. We need three salts 
> and three lengths in the header. One for the PBKDF2 KDK, one 
> for the MAC key, and one for the encryption key.

HKDF-Expand doesn't need a salt.  You just need one salt to make 
the KDK (whether you use PBKDF2 or HKDF-Extract for that) and no 
extra salts for deriving the encryption and MAC key.