{
    "content": [
        {
            "type": "text",
            "text": "# EVP_KDF-PKCS12KDF(7SSL) (man)\n\n## NAME\n\nEVPKDF-PKCS12KDF - The PKCS#12 EVPKDF implementation\n\n## DESCRIPTION\n\nSupport for computing the PKCS#12 password-based KDF through the EVPKDF API.\n\n## Sections\n\n- **NAME**\n- **DESCRIPTION** (2 subsections)\n- **NOTES**\n- **CONFORMING TO**\n- **SEE ALSO**\n- **HISTORY**\n- **COPYRIGHT**\n\nUse structuredContent.sections for detailed options, examples, and full documentation.\n"
        }
    ],
    "structuredContent": {
        "command": "EVP_KDF-PKCS12KDF",
        "section": "7SSL",
        "mode": "man",
        "summary": "EVPKDF-PKCS12KDF - The PKCS#12 EVPKDF implementation",
        "synopsis": null,
        "tldr_summary": null,
        "tldr_examples": [],
        "tldr_source": null,
        "flags": [],
        "examples": [],
        "see_also": [
            {
                "name": "EVPKDF",
                "section": "3",
                "url": "https://www.chedong.com/phpMan.php/man/EVPKDF/3/json"
            },
            {
                "name": "EVPKDFCTXnew",
                "section": "3",
                "url": "https://www.chedong.com/phpMan.php/man/EVPKDFCTXnew/3/json"
            },
            {
                "name": "EVPKDFCTXfree",
                "section": "3",
                "url": "https://www.chedong.com/phpMan.php/man/EVPKDFCTXfree/3/json"
            },
            {
                "name": "EVPKDFCTXsetparams",
                "section": "3",
                "url": "https://www.chedong.com/phpMan.php/man/EVPKDFCTXsetparams/3/json"
            },
            {
                "name": "EVPKDFderive",
                "section": "3",
                "url": "https://www.chedong.com/phpMan.php/man/EVPKDFderive/3/json"
            },
            {
                "name": "EVPKDF",
                "section": "3",
                "url": "https://www.chedong.com/phpMan.php/man/EVPKDF/3/json"
            }
        ],
        "section_outline": [
            {
                "name": "NAME",
                "lines": 2,
                "subsections": []
            },
            {
                "name": "DESCRIPTION",
                "lines": 7,
                "subsections": [
                    {
                        "name": "Identity",
                        "lines": 3
                    },
                    {
                        "name": "Supported parameters",
                        "lines": 13
                    }
                ]
            },
            {
                "name": "NOTES",
                "lines": 8,
                "subsections": []
            },
            {
                "name": "CONFORMING TO",
                "lines": 2,
                "subsections": []
            },
            {
                "name": "SEE ALSO",
                "lines": 3,
                "subsections": []
            },
            {
                "name": "HISTORY",
                "lines": 2,
                "subsections": []
            },
            {
                "name": "COPYRIGHT",
                "lines": 9,
                "subsections": []
            }
        ],
        "sections": {
            "NAME": {
                "content": "EVPKDF-PKCS12KDF - The PKCS#12 EVPKDF implementation\n",
                "subsections": []
            },
            "DESCRIPTION": {
                "content": "Support for computing the PKCS#12 password-based KDF through the EVPKDF API.\n\nThe EVPKDF-PKCS12KDF algorithm implements the PKCS#12 password-based key derivation\nfunction, as described in appendix B of RFC 7292 (PKCS #12: Personal Information Exchange\nSyntax); it derives a key from a password using a salt, iteration count and the intended\nusage.\n",
                "subsections": [
                    {
                        "name": "Identity",
                        "content": "\"PKCS12KDF\" is the name for this implementation; it can be used with the EVPKDFfetch()\nfunction.\n"
                    },
                    {
                        "name": "Supported parameters",
                        "content": "The supported parameters are:\n\n\"pass\" (OSSLKDFPARAMPASSWORD) <octet string>\n\"salt\" (OSSLKDFPARAMSALT) <octet string>\n\"iter\" (OSSLKDFPARAMITER) <unsigned integer>\n\"properties\" (OSSLKDFPARAMPROPERTIES) <UTF8 string>\n\"digest\" (OSSLKDFPARAMDIGEST) <UTF8 string>\nThese parameters work as described in \"PARAMETERS\" in EVPKDF(3).\n\n\"id\" (OSSLKDFPARAMPKCS12ID) <integer>\nThis parameter is used to specify the intended usage of the output bits, as per RFC 7292\nsection B.3.\n"
                    }
                ]
            },
            "NOTES": {
                "content": "A typical application of this algorithm is to derive keying material for an encryption\nalgorithm from a password in the \"pass\", a salt in \"salt\", and an iteration count.\n\nIncreasing the \"iter\" parameter slows down the algorithm which makes it harder for an\nattacker to perform a brute force attack using a large number of candidate passwords.\n\nNo assumption is made regarding the given password; it is simply treated as a byte sequence.\n",
                "subsections": []
            },
            "CONFORMING TO": {
                "content": "RFC7292\n",
                "subsections": []
            },
            "SEE ALSO": {
                "content": "EVPKDF(3), EVPKDFCTXnew(3), EVPKDFCTXfree(3), EVPKDFCTXsetparams(3),\nEVPKDFderive(3), \"PARAMETERS\" in EVPKDF(3)\n",
                "subsections": []
            },
            "HISTORY": {
                "content": "This functionality was added to OpenSSL 3.0.\n",
                "subsections": []
            },
            "COPYRIGHT": {
                "content": "Copyright 2020 The OpenSSL Project Authors. All Rights Reserved.\n\nLicensed under the Apache License 2.0 (the \"License\").  You may not use this file except in\ncompliance with the License.  You can obtain a copy in the file LICENSE in the source\ndistribution or at <https://www.openssl.org/source/license.html>.\n\n\n\n3.0.2                                        2026-06-02                      EVPKDF-PKCS12KDF(7SSL)",
                "subsections": []
            }
        }
    }
}