Cryptographic Domain Separation

Cryptographic domain separation distinguishes different uses of a primitive so an output intended for one purpose cannot be confused with an output for another. A protocol can incorporate a purpose label into a key derivation or signed message format.

For example, authentication and encryption keys can be derived with different context labels. Labels must be unambiguous and consistently encoded; simply naming variables differently in application code does not create cryptographic separation.