Re: HMAC verification with EVP Interface

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: openssl-users@xxxxxxxxxxx
Subject: Re: HMAC verification with EVP Interface
From: Ken Goldman <kgoldman@xxxxxxxxxx>
Date: Thu, 26 Aug 2021 08:46:23 -0400
In-reply-to: <CAEi-Pst0jCm5Uz-5_vrX5c1Mfzfrmr00G0dhB5uoY5EvyJM01Q@mail.gmail.com>
References: <CAFftDdrhAN52=Yht_OqAHec43iN0X-AWu6mDKV-=pobyL+_TYQ@mail.gmail.com> <64f7db5c96702831edbcbf5cb83ee2f7da4f1acd.camel@openssl.org> <CAEi-Pst0jCm5Uz-5_vrX5c1Mfzfrmr00G0dhB5uoY5EvyJM01Q@mail.gmail.com>
User-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.13.0

On 8/26/2021 5:35 AM, d0 wrote:

Don't forget to use CRYPTO_memcmp for comparing the HMACs, not regular
ol' memcmp.


What's the rationale?  The HMAC result isn't secret.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Follow-Ups:
- Re: HMAC verification with EVP Interface
  - From: Billy Brumley

References:
- HMAC verification with EVP Interface
  - From: William Roberts
- Re: HMAC verification with EVP Interface
  - From: Tomas Mraz
- Re: HMAC verification with EVP Interface
  - From: d0

Prev by Date: Re: HMAC verification with EVP Interface
Next by Date: Re: OpenSSL dynamic engine loading shows error
Previous by thread: Re: HMAC verification with EVP Interface
Next by thread: Re: HMAC verification with EVP Interface
Index(es):
- Date
- Thread

[Index of Archives] [Linux ARM Kernel] [Linux ARM] [Linux Omap] [Fedora ARM] [IETF Annouce] [Security] [Bugtraq] [Linux] [Linux OMAP] [Linux MIPS] [ECOS] [Asterisk Internet PBX] [Linux API]

Powered by Linux