HMAC operation

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

HMAC operation

610 Views
rohininarasipur
Contributor II

Hello, ALGORITHM OPERATION command has 2 types of HMAC: normal HMAC and HMAC with precomputed IPAD and OPAD. Does this mean that for the first option we don't have to give key? And for the second option, security manual says if we first issue KEY command for IPAD and OPAD followed by FIFO STORE, then key will be encrypted and stored. So while verifying we can specify encrypted key by calling KEY command or we have to again call KEY command for IPAD and OPAD?

Tags (2)
0 Kudos
1 Reply

452 Views
bpe
NXP Employee
NXP Employee

>Hello, ALGORITHM OPERATION command has 2 types of HMAC: normal HMAC

>and HMAC with precomputed IPAD and OPAD. Does this mean that for the

>first option we don't have to give key?

>

[Platon] No. If you need a plain hash,  set AAI = 0. HMAC means a

keyed hash. The difference is only in the format of the key.

>And for the second option, security manual says if we first issue

>KEY command for IPAD and OPAD followed by FIFO STORE, then key will

>be encrypted and stored. So while verifying we can specify encrypted

>key by calling KEY command or we have to again call KEY command

>for IPAD and OPAD?

>

[Platon] You need to generate a split key only once. Any subsequent

operation with this key can use the split key.


Have a great day,
Platon

-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

0 Kudos