Primary source: eprint.iacr.org/2010/264
Verified locator: Cryptology ePrint2010/264, by Hugo Krawczyk. Abstract: formal KDF treatment via computational extractors, extract-then-expand design, HMAC extraction and pseudorandomness assumptions. Received11May2010; current record revised10May2020.
RFC5869, Informational, May2010. Sections2.2–2.3 specify extraction and expansion; §3.2 describes context information. Authors’ Addresses verifies full names Hugo Krawczyk and Pasi Eronen.
February1997, bylines H.Krawczyk, M.Bellare and R.Canetti. Title page and Status of This Memo classify the RFC as Informational; §§1–2 motivate and define HMAC. Full author identities are verified separately by the June1996 author manuscript Keying Hash Functions for Message Authentication, rather than inferred by expanding initials.
Author manuscript, title page dated June1996, exact full bylines Mihir Bellare, Ran Canetti and Hugo Krawczyk. Abstract and §§1.1–1.3 describe NMAC/HMAC, the shared-key authenticity problem and the relation between security and underlying hash-function assumptions. The title page identifies an abridged version in CRYPTO96 proceedings, LNCS1109.