Worked on the aws/rolesanywhere-credential-helper repository to deliver secure key derivation features focused on cryptographic compatibility. Developed HMAC-SHA1 PRF support within PBKDF2 key derivation, ensuring the tool could handle ACM-exported keys and comply with RFC 8018 defaults. Enhanced the PBKDF2Params structure to support optional PRF handling and expanded SHA-1 support, while also introducing new constants for cryptographic operations. Improved the test suite by adding fixtures for ACM-encrypted keys and updating signer tests. Maintained code quality by refining static code analysis practices, specifically excluding sensitive test keys from Semgrep scans. Utilized Go, cryptography, and static analysis throughout the work.