perl module HMAC key length vs. C client/server

Open mrash opened this issue 9 years ago • 0 comments

The '[perl FKO module] [HMAC encrypt/decrypt] invalid (long) keys' test currently fails because there is a mismatch between the maximum key length enforced via MAX_KEY_LEN (set to 128) in common/common.h vs. MAX_DIGEST_BLOCK_LEN (set to SHA3_256_BLOCK_LEN = 136) in lib/hmac.h. We either need to set MAX_KEY_LEN = SHA3_256_BLOCK_LEN, or enforce a max HMAC key length of 128.

Dec 10 '16 20:12 mrash