possible to compute plain old HMAC-SHA1 of buffer with krb5 api?

Greg Hudson ghudson at MIT.EDU
Mon Aug 1 11:44:36 EDT 2011


On Mon, 2011-08-01 at 04:28 -0400, Chris Hecker wrote:
> Is it possible to compute a regular old hmac_sha1 with the krb5 api?  In 
> other words, the normal api is digest = hmac_sha1(data,pass).  I notice 
> there are a bunch of hmac functions and krb5int_hmac is even exported, 
> but it's not clear how to call it to be compatible with a regular hmac_sha1.

krb5int_hmac is only exported for testing purposes, I think.  We export
SHA-1 via an unkeyed checksum type, but we don't export HMAC as a crypto
primitive.





More information about the Kerberos mailing list