I'm working on an implementation of HMAC-SHA-256 in classic ASP (legacy code). I currently have it working, and the resulting values are correct compared to some test cases I came up with along with test cases found in RFC4231. Does NIST have published test vectors for HMAC-SHA-256? And where would I be able to find them if they do?

1 Answer 1


NIST publishes a lot of test vectors. Including for HMAC (near the end of that page). In the file contained in the Zip archive, the vectors for HMAC/SHA-256 ought to be the ones with the parameter "L=32".

  • Thanks for the link, I was able to get it implemented without a problem. Sep 8, 2013 at 14:38
  • Am I correct to assume the Hmac-Sha256 of L=32 are truncated in these files?
    – NewbiZ
    Feb 16, 2022 at 7:44

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .