SHA-1 HMAC signature is now computed over concatenation of TEXT and RODATA segments
This commit is contained in:
1 parent
fa50e4df48
commit
df29e8f745
1 file changed
+2
-2
@@ -74,8 +74,8 @@ bool fips_compute_hmac_signature(const char *key, char *signature)
|
|||||||
chunk_t signature_chunk = chunk_empty;
|
chunk_t signature_chunk = chunk_empty;
|
||||||
|
|
||||||
signer->set_key(signer, hmac_key);
|
signer->set_key(signer, hmac_key);
|
||||||
/* TODO include rodata_chunk in HMAC */
|
signer->allocate_signature(signer, text_chunk, NULL);
|
||||||
signer->allocate_signature(signer, text_chunk, &signature_chunk);
|
signer->allocate_signature(signer, rodata_chunk, &signature_chunk);
|
||||||
signer->destroy(signer);
|
signer->destroy(signer);
|
||||||
|
|
||||||
sprintf(signature, "%#B", &signature_chunk);
|
sprintf(signature, "%#B", &signature_chunk);
|
||||||
|
|||||||
Reference in new issue
Block a user