Re: HMAC-SHA1

Scott Klement wrote:

Sorry, I haven't used it. I've used QC3CALHA (Similar API, but without the HMAC) and it works pretty well, but I haven't yet found an excuse to play with QC3CALHM

It seems to work:
. . .
D DS
D 1 4I 0 INZ(2)
D 5 8I 0 INZ(20)
D 9 9 INZ('0')
D 13 32 INZ(X'6B657900000000000000-
D 00000000000000000000')
D KEYDES 1 32
. . .
D INP S 43 INZ('The quick brown fox jumps over -
D the lazy dog')
c callp HTTP_xlate(43:INP:TO_ASCII)
C CALL 'QC3CALHM'
C PARM INP
C PARM INPLEN
C PARM 'DATA0100' INPFMT 8
C PARM ALGDES
C PARM 'ALGD0500' ALGFMT 8
C PARM KEYDES
C PARM 'KEYD0200' KEYFMT 8
C PARM '0' CSP 1
C PARM ' ' CSPDEV 10
C PARM HMAC 20
C PARM ERRCOD
. . .
(spaces condensed out; the key is ASCII "key" padded with nulls)

produces
EVAL hmac:x
00000 DE7C9B85 B8B78AA6 BC8A7A36 F70A9070
00010 1C9DB4D9 ........ ........ ........

which matches up with what both the Wikipedia article on HMAC, and with what the demo at
http://jssha.sourceforge.net/
gives for "The quick brown fox jumps over the lazy dog" HMAC'd with "key" as the key.

--
JHHL