Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 39623

a method for constructing a message authentication code based on a cryptographic hash function.

69 votes

What's the difference between HMAC-SHA256(key, data) and SHA256(key + data)

Yes, HMAC is more complex than simple concatenation. … Then HMAC is defined as: HASH(Key XOR opad, HASH(Key XOR ipad, text)) or, in detail from the RFC, (Pretext: The definition of HMAC requires a cryptographic hash function, which we denote by H, …
Anti-weakpasswords's user avatar
1 vote

How to simply and efficiently generate different keys from one password?

CodesInChaos makes two good points - don't exceed the natural output size of your underlying hash (160 bits for PBKDF2-HMAC-SHA-1, 512 bits for PBKDF2-HMAC-SHA-512, etc.), and a 128 bit salt is probably …
Anti-weakpasswords's user avatar
11 votes

HMACSHA512 versus Rfc2898DeriveBytes for password hash

However, @Jither created a nice example of adding PBKDF2-HMAC-SHA256, PBKDF2-HMAC-SHA384, PBKDF2-HMAC-SHA512, etc. capabilities to .NET, and I've included a variant with a reasonable set of test vectors … For another reference related to an actual design flaw in 1Password, see this Hashcat forum thread - "For each iteration of PBKDF2-HMAC-SHA1 you call 4 times the SHA1 transform. …
Anti-weakpasswords's user avatar