[Ndn-interest] Adding HMAC to available NDN signature types

[Wentao Shang]

On Fri, Sep 19, 2014 at 9:45 PM, Yingdi Yu <yingdi at cs.ucla.edu> wrote:

> Hi Adeola,
>
> It is great that we have a proposal for HMAC, a few comments about the doc.
>
> 1. I think you should mentioned in the spec that how to handle keys that
> are longer than the hash output.
>

Hi Yingdi,

Correct me if I'm wrong: I thought the key should have the same length as
the hash output. What people usually do is to provide some kind of secret
(e.g., a password) and use key derivation function to get the actual HMAC
key.

Wentao


> 2. we should either disable keys that are shorter than hash output or
> still state how to generate HMAC when a key is short. Just "discourage" is
> not enough.
>
> Yingdi
>
> On Sep 19, 2014, at 11:12 AM, Adeola Bannis <thecodemaiden at gmail.com>
> wrote:
>
> Hello all,
>
> I am proposing to add an HMAC type, using SHA256 as the hash function, to
> the signature types defined at
> http://named-data.net/doc/NDN-TLV/current/signature.html. This will
> enable communication with symmetric keys, which reduces the signing and
> verification load on resource-constrained devices.
>
> The proposal is attached. Please review it and reply with any comments or
> suggestions.
>
> Thanks,
> Adeola
> <TLV_spec_HMAC_SHA256.docx>_______________________________________________
> Ndn-interest mailing list
> Ndn-interest at lists.cs.ucla.edu
> http://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest
>
>
>
>
>
>
> _______________________________________________
> Ndn-interest mailing list
> Ndn-interest at lists.cs.ucla.edu
> http://www.lists.cs.ucla.edu/mailman/listinfo/ndn-interest
>
>


-- 
PhD @ IRL, CSD, UCLA
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.lists.cs.ucla.edu/pipermail/ndn-interest/attachments/20140919/caf8fc1a/attachment.html>