On Wed, Jun 13, 2018 at 6:42 AM Mimi Zohar <zohar@xxxxxxxxxxxxxxxxxx> wrote: > > On Tue, 2018-04-17 at 15:56 -0700, Matthew Garrett wrote: > > - err = !HMAC_Init_ex(pctx, evmkey, sizeof(evmkey), EVP_sha1(), NULL); > > + md = EVP_get_digestbyname(params.hash_algo); > > HMAC is still limited to sha1. Yes, let me revert that hunk and I'll resend.