BLAKE3 Derive Key
The BLAKE3 key derivation mode derives independent subkeys from a context string and input key material, using domain separation constants so that outputs from different contexts are independent.
Purpose
Derives purpose-specific subkeys from a master key, with domain separation preventing cross-purpose key confusion.
Mechanism
A domain separation constant is injected into the initial state (the derive-key mode flag); the context string is absorbed and compressed first, then the input key material is absorbed to output the derived key.
Use cases
- Key derivation
- Subkey generation
- Domain-separated keys