in kdf_pbkdf2.go [27:36]
func newHashFromPRF(ai pkix.AlgorithmIdentifier) (func() hash.Hash, error) {
switch {
case len(ai.Algorithm) == 0 || ai.Algorithm.Equal(oidHMACWithSHA1):
return sha1.New, nil
case ai.Algorithm.Equal(oidHMACWithSHA256):
return sha256.New, nil
default:
return nil, errors.New("pkcs8: unsupported hash function")
}
}