diff --git a/cc/proto/hkdf_prf.proto b/cc/proto/hkdf_prf.proto index 3d3cbe90ea..27c0f6baa5 100644 --- a/cc/proto/hkdf_prf.proto +++ b/cc/proto/hkdf_prf.proto @@ -26,8 +26,12 @@ option go_package = "github.com/google/tink/proto/hkdf_prf_proto"; message HkdfPrfParams { HashType hash = 1; - // Salt, optional in RFC 5869. Using "" is equivalent to zeros of length up to - // the block length of the HMac. + // Optional. + // + // An unspecified or zero-length value is equivalent to a sequence of zeros + // (0x00) with a length equal to the output size of hash. + // + // See https://rfc-editor.org/rfc/rfc5869. bytes salt = 2; } diff --git a/java_src/proto/hkdf_prf.proto b/java_src/proto/hkdf_prf.proto index 3d3cbe90ea..27c0f6baa5 100644 --- a/java_src/proto/hkdf_prf.proto +++ b/java_src/proto/hkdf_prf.proto @@ -26,8 +26,12 @@ option go_package = "github.com/google/tink/proto/hkdf_prf_proto"; message HkdfPrfParams { HashType hash = 1; - // Salt, optional in RFC 5869. Using "" is equivalent to zeros of length up to - // the block length of the HMac. + // Optional. + // + // An unspecified or zero-length value is equivalent to a sequence of zeros + // (0x00) with a length equal to the output size of hash. + // + // See https://rfc-editor.org/rfc/rfc5869. bytes salt = 2; } diff --git a/javascript/proto/hkdf_prf.proto b/javascript/proto/hkdf_prf.proto index 3d3cbe90ea..27c0f6baa5 100644 --- a/javascript/proto/hkdf_prf.proto +++ b/javascript/proto/hkdf_prf.proto @@ -26,8 +26,12 @@ option go_package = "github.com/google/tink/proto/hkdf_prf_proto"; message HkdfPrfParams { HashType hash = 1; - // Salt, optional in RFC 5869. Using "" is equivalent to zeros of length up to - // the block length of the HMac. + // Optional. + // + // An unspecified or zero-length value is equivalent to a sequence of zeros + // (0x00) with a length equal to the output size of hash. + // + // See https://rfc-editor.org/rfc/rfc5869. bytes salt = 2; } diff --git a/proto/hkdf_prf.proto b/proto/hkdf_prf.proto index 3d3cbe90ea..27c0f6baa5 100644 --- a/proto/hkdf_prf.proto +++ b/proto/hkdf_prf.proto @@ -26,8 +26,12 @@ option go_package = "github.com/google/tink/proto/hkdf_prf_proto"; message HkdfPrfParams { HashType hash = 1; - // Salt, optional in RFC 5869. Using "" is equivalent to zeros of length up to - // the block length of the HMac. + // Optional. + // + // An unspecified or zero-length value is equivalent to a sequence of zeros + // (0x00) with a length equal to the output size of hash. + // + // See https://rfc-editor.org/rfc/rfc5869. bytes salt = 2; } diff --git a/python/tink/proto/hkdf_prf.proto b/python/tink/proto/hkdf_prf.proto index 9782850b50..087769a84a 100644 --- a/python/tink/proto/hkdf_prf.proto +++ b/python/tink/proto/hkdf_prf.proto @@ -26,8 +26,12 @@ option go_package = "github.com/google/tink/proto/hkdf_prf_proto"; message HkdfPrfParams { HashType hash = 1; - // Salt, optional in RFC 5869. Using "" is equivalent to zeros of length up to - // the block length of the HMac. + // Optional. + // + // An unspecified or zero-length value is equivalent to a sequence of zeros + // (0x00) with a length equal to the output size of hash. + // + // See https://rfc-editor.org/rfc/rfc5869. bytes salt = 2; }