Skip to content

HMAC-SHA-384 and HMAC-SHA-512 implementations broken?! #24

@LittleEntity

Description

@LittleEntity

Hallo dear developers,

please check RFC 4231 section 4.2.

4.2. Test Case 1

Key = 0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
Message = "Hi There"
  • HMAC-SHA-256 matches
  • HMAC-SHA-384 match fails
    afd03944d84895626b0825f4ab46907f15f9dadbe4101ec682aa034c7cebc59cfaea9ea9076ede7f4af152e8b2fa9cb6
    !=
    0a046aaa0255e432912228f8ccda437c8a8363fb160afb0570ab5b1fd5ddc20eb1888b9ed4e5b6cb5bc034cd9ef70e40
    
  • HMAC-SHA-512 match fails
    9656975ee5de55e75f2976ecce9a04501060b9dc22a6eda2eaef638966280182477fe09f080b2bf564649cad42af8607a2bd8d02979df3a980f15e2326a0a22a
    !=
    87aa7cdea5ef619d4ff0b4241a1d6cb02379f4e2ce4ec2787ad0b30545e17cdedaa833b7d6b8a702038b274eaea3f4e4be9d914eeb61f1702e696c203a126854
    

4.3. Test Case 2

  • HMAC-SHA-256 matches
  • HMAC-SHA-384 match fails
  • HMAC-SHA-512 match fails

PS

thankyou for an awesome online crypto tool =D The usability is really amazing! Unfortunately I don't have enough spare time to fix this issue for the community. So sorry =( I hope the report helps.

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions