KMACKDF uses KMAC to derive a `size`-byte cryptographic key from a key initialization key (`kik`), a `label`, and a `context`.

NewAESCryptor creates a Cryptor which uses AES-256 in GCM mode.

NewKMAC128 returns a new KMAC hash providing 128 bits of security using the given key, which must have 16 bytes or more, generating the given tagSize bytes output and using the given customizationString.

NewKMAC256 returns a new KMAC hash providing 256 bits of security using the given key, which must have 32 bytes or more, generating the given tagSize bytes output and using the given customizationString.

NewKMAC256Tagger creates a Tagger which uses KMAC256.

NewKWP returns a KWP instance.

MaxWrapSize is the largest key byte length that may be wrapped.

MinWrapSize is the smallest key byte length that may be wrapped.

AES256GCM implements AEADInterface.

Cryptor implements the CryptorInterface.

KWP is an implementation of an AES-KWP key wrapping cipher.

MockRandom is a mock implementation of RandomInterface for testing.

NativeRandom implements RandomInterface.

PasswordHasher implements PasswordHasherInterface using pbkdf2.

Tagger implements the TaggerInterface.

AEADInterface represents an Authenticated Encryption scheme with Associated Data.

CryptorInterface provides an API to encrypt/decrypt data and additional associated data with a (wrapped) random key.

KeyWrapperInterface provides an API to wrap/unwrap key material.

PasswordHasherInterface provides an API for securely generating and checking passwords.

RandomInterface provides an API for getting cryptographically secure random bytes.

TaggerInterface provides an API to create a cryptographic tag, i.e.