I started implementing LuaJIT FFI bindings to Nettle, and I found that
nettle_pbkdf2_hmac_sha1 and nettle_pbkdf2_hmac_sha256
sometimes return longer dst than what was requested. See:
https://github.com/bungle/lua-resty-nettle/blob/master/lib/resty/nettle/pbkd...
I had to put ":sub(1, len)" to overcome that.
Is it by a design or is it a bug (maybe in my code?).
Regards Aapo