Re: [hash2] Formal Review Begins

From: Darryl Green (darryl.green_at_[hidden])
Date: 2024-12-09 22:55:39

On Mon, 9 Dec 2024, 11:54 pm Peter Dimov via Boost, <boost_at_[hidden]>
wrote:

> Amusingly enough, I'm _right now_ looking at an API documentation
> which requires HMAC-SHA1. :-)

Amusingly enough there isn't a problem with using HMAC-SHA1 if the key is
being used as a secret, is predictable etc. This should make its use in
message authentication perfectly ok if the conditions for effective
authentication through use of HMAC are actually met in the system in
question.