[33697] in Kerberos
Re: possible to compute plain old HMAC-SHA1 of buffer with krb5 api?
daemon@ATHENA.MIT.EDU (Greg Hudson)
Mon Aug 1 11:46:30 2011
From: Greg Hudson <ghudson@mit.edu>
To: Chris Hecker <checker@d6.com>
In-Reply-To: <4E3663B6.4040004@d6.com>
Date: Mon, 01 Aug 2011 11:44:36 -0400
Message-ID: <1312213476.23877.264.camel@t410>
Mime-Version: 1.0
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Mon, 2011-08-01 at 04:28 -0400, Chris Hecker wrote:
> Is it possible to compute a regular old hmac_sha1 with the krb5 api? In
> other words, the normal api is digest = hmac_sha1(data,pass). I notice
> there are a bunch of hmac functions and krb5int_hmac is even exported,
> but it's not clear how to call it to be compatible with a regular hmac_sha1.
krb5int_hmac is only exported for testing purposes, I think. We export
SHA-1 via an unkeyed checksum type, but we don't export HMAC as a crypto
primitive.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
