nodejs
diff --git a/Collapse file
‎src/crypto/crypto_hkdf.cc‎
Copy file name to clipboardExpand all lines: src/crypto/crypto_hkdf.cc
+4Lines changed: 4 additions & 0 deletions b/Collapse file
‎src/crypto/crypto_hkdf.cc‎
Copy file name to clipboardExpand all lines: src/crypto/crypto_hkdf.cc
+4Lines changed: 4 additions & 0 deletions
diff --git a/Collapse file
‎src/crypto/crypto_hkdf.h‎
Copy file name to clipboardExpand all lines: src/crypto/crypto_hkdf.h
-2Lines changed: 0 additions & 2 deletions b/Collapse file
‎src/crypto/crypto_hkdf.h‎
Copy file name to clipboardExpand all lines: src/crypto/crypto_hkdf.h
-2Lines changed: 0 additions & 2 deletions
@@ -87,6 +87,10 @@ Maybe<bool> HKDFTraits::AdditionalConfig(
       : info.ToByteSource();
 
   params->length = args[offset + 4].As<Uint32>()->Value();
+  // HKDF-Expand computes up to 255 HMAC blocks, each having as many bits as the
+  // output of the hash function. 255 is a hard limit because HKDF appends an
+  // 8-bit counter to each HMAC'd message, starting at 1.
+  constexpr size_t kMaxDigestMultiplier = 255;
   size_t max_length = EVP_MD_size(params->digest) * kMaxDigestMultiplier;
   if (params->length > max_length) {
     THROW_ERR_CRYPTO_INVALID_KEYLEN(env);
 
@@ -11,8 +11,6 @@
 
 namespace node {
 namespace crypto {
-static constexpr size_t kMaxDigestMultiplier = 255;
-
 struct HKDFConfig final : public MemoryRetainer {
   CryptoJobMode mode;
   size_t length;