Quantcast
Channel: SCN: Message List - HMAC (SHA1) key longer than 81 characters not possible?
Viewing all articles
Browse latest Browse all 10

Re: HMAC (SHA1) key longer than 81 characters not possible?

$
0
0

Note that the functions are not released and encapsulate a kernel-function to write the key into the SecureStorage area  - there will be no publicly available information on these as far as I am aware and are insecure to use (from a stability perspective).

 

What is publicly known about the SecureStorage area is that the call-stacks are protected to access the data again (particularly to decrypt) so I can't see how this would work in your own application because even within SAP only special programs are allowed to call the functions.

 

What data is the application trying to store? A password? Possibly there is a better way to deal with it in a secure manner.

Have you looked into the SSF (Secure Store & Forward) because you mentioned "signing a message"?

 

Cheers,

Julius

 

Edited by: Julius Bussche on Aug 5, 2010 10:21 PM


Viewing all articles
Browse latest Browse all 10

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>