Consider adding all supported prf-derived key templates

[rucciva]

Help us help you

We are currently using prf-derived hmac to store blind index of (the plaintext of encrypted) values stored on database columns to enable exact match query.

Is your feature request related to a problem?

We would like to use untruncated hmac-sha256 so that we could maintain the uniqueness property of the stored values. We would like to use tinkey to manage the keys but it doesn't seems to support this kind of key template

What sort of feature would you like to see?

Addition of HKDF_SHA256_DERIVES_HMAC_SHA256_256BITTAG key template. But is would be awesome if all supported key templates are added to tinkey

Have you considered any alternative solutions?

Creating custom script to create and manage the keys

Would you like to add additional context?

[tholenst]

While this makes sense, it's also not quite obvious how to do that because things can be arbitrarily combined.

In general, you might want to just create your own binary which creates you the template.