about HMAC SHA1

RE: about HMAC SHA1

Vidar Berg — Fri, 03 Apr 2020 11:28:03 GMT

We don't include this algorithm in our SDK, so you have to make your own or integrate an existing solution. For the open-source implementations you have evaluated, would it be possible just to build an API wrapper on top to get the same API interface as you had on the ST?

RE: about HMAC SHA1

kevin seo — Fri, 03 Apr 2020 06:33:14 GMT

I want to use hmac-sha1 even if the security is weak.

But the examples you gave or the ones I found on Google are not what I want.

The function used in ST is as follows.

int32_t HMAC_SHA1_Init(HMAC_SHA1ctx_stt *P_pHMAC_SHA1ctx);
int32_t HMAC_SHA1_Append(HMAC_SHA1ctx_stt *P_pHMAC_SHA1ctx, const uint8_t *P_pInputBuffer, int32_t P_inputSize);
int32_t HMAC_SHA1_Finish(HMAC_SHA1ctx_stt *P_pHMAC_SHA1ctx, uint8_t *P_pOutputBuffer, int32_t *P_pOutputSize);

Isn't there a way to use Nordic with a function that does the same thing?

RE: about HMAC SHA1

kevin seo — Thu, 02 Apr 2020 11:50:14 GMT

Thank you.

I'll use open source

RE: about HMAC SHA1

Dmitry — Thu, 02 Apr 2020 08:26:53 GMT

Hi,

HMAC is a message authentication algoritm based on hash function, it's not the same as SHA1/SHA256. You can find many open-source implementations of hmac-sha1, for example here.

Keep in mind that SHA1 is an old and weak hash algorithm - if you don't have serious reasons to keep it for compatibility, it's better to switch to SHA256/SHA512.