On Tue, Apr 13, 2010 at 04:00:11PM +0300, Dmitry Kasatkin wrote: > > I would also: > 1. calc hash(opad) using sw, export > 2. hash(ipad ∥ message) using hw > 3. then import and finup hash from step 1 with results of step 2 (using sw) Step 3 is the problem. If you perform step 3 in software then there is no point in exporting a hmac(sha1) object. We should instead add ahash support to hmac and use that. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
