diff --git a/box/box_test.go b/box/box_test.go
index 36c801b..c9beb77 100644
--- a/box/box_test.go
+++ b/box/box_test.go
@@ -65,3 +65,56 @@ func BenchmarkEncryptBox(b *testing.B) {
 		enc.EncryptBox(nil, nil, []byte("yellow submarine"), 0, 0)
 	}
 }
+
+func (s *S) TestKDFVectors(c *C) {
+	// Vectors from: https://github.com/stouset/go.noise/blob/e84dad9373d43bd187fd0313d9bec1fa48d4a263/ciphersuite/kdf_test.go
+	vectors := []struct {
+		expected []byte
+
+		secret []byte
+		extra  []byte
+		info   []byte
+		outLen int
+	}{
+		{
+			[]byte("\x39\xa9\x19\x6f\x32\xae\xe7\x39"),
+			nil,
+			nil,
+			nil,
+			8,
+		},
+		{
+			[]byte("\xc4\x90\xf6\xe4\x6a\xe8\x1a\xbb"),
+			[]byte{0x00},
+			[]byte{0x00},
+			[]byte{0x00},
+			8,
+		},
+		{
+			[]byte("\xc4\x90\xf6\xe4\x6a\xe8\x1a\xbb\x59\x01\x32\xc6\xf1\x40\xb3\x7e"),
+			[]byte{0x00},
+			[]byte{0x00},
+			[]byte{0x00},
+			16,
+		},
+		{
+			[]byte("\xad\x5c\x1b\x3f\x13\xce\x4b\x45"),
+			[]byte("secret"),
+			[]byte("extra"),
+			[]byte("info"),
+			8,
+		},
+		{
+			[]byte("\x8d\x60\xe9\x6a\x29\xb6\x96\x2f\xf4\x59\xea\xf0\x5a\x3e\xd2\xf1\x82\x80\x63\xc6\xee\x93\x66\x2d\x89\xab\xb2\xff\x56\xb6\x97\xd2\x78\x27\xbe\x44\xf9\xc4\xab\xad\x58\x0d\x4f\xfe\x86\x68\x80\xba\xb4\xbd\x5f\xc1\xa3\xec\xd9\x48\xa3\x24\x35\xa2\xde\x5e\xab\x1d\x76\x86\xc2\x3c\x4f\xf9\x88\xc1\xf8\x1d\x10\xe8\x94\x41\x8e\xe2\x5a\xa8\x59\xaf\xad\x08\xea\x4f\xfe\x5f\x5c\x66\x91\x13\xde\x4a\x75\xc9\x16\xd3\x9e\x72\x67\x8b\x7f\x04\x10\x4b\x0c\x66\x34\xcc\x37\x1a\xe7\x0e\x8d\x4a\x46\x9d\x1f\x54\xe6\x9e\xf7\x33\x63\x3b"),
+			[]byte("\xff\xff\xff\xff"),
+			[]byte("\xee\xee\xee\xee"),
+			[]byte("\xdd\xdd\xdd\xdd"),
+			128,
+		},
+	}
+
+	for i, v := range vectors {
+		res := DeriveKey(v.secret, v.extra, v.info, v.outLen)
+		c.Assert(res, DeepEquals, v.expected, Commentf("n = %d", i))
+	}
+}