How does Hacl_HKDF_expand_sha2_256 signal errors, i.e., invalid arguments?

[duesee]

The output size of HKDF is limited to 255 * HashLen, see https://www.rfc-editor.org/rfc/rfc5869.html#section-2.3. However, Hacl_HKDF_expand_sha2_256 accepts greater values. Should this be handled? And if so, how?

[duesee]

This code passes all tests, although it shouldn't according to the RFC ...

    bytes got_OKM = std::vector<uint8_t>(8161);

    Hacl_HKDF_expand_sha2_256(got_OKM.data(),
                              got_prk.data(),
                              got_prk.size(),
                              test.info.data(),
                              test.info.size(),
                              8161);

    std::cout << bytes_to_hex(got_OKM) << std::endl;
    got_OKM.resize(test.L);
    std::cout << bytes_to_hex(got_OKM) << std::endl;

[franziskuskiefer]

HKDF functions don't throw errors. This is something that must be handled on the outside for now.