[Info-vax] hmac-md5 key gen

[Stephen Hoffman]

On 2013-12-13 21:01:59 +0000, kc at kayceesoftware.com said:

> With all the tools and libraries and security options with oVMS, is 
> there a callable system service or library that has the mhash() 
> function or an equivalent?

Other than VMS support for these being old and limited?

> I've looked at the docs for the crtl crypt

Crypt?  That's usually encryption, and not typically a message digest.

> and encrypt,

Also encryption, either via DES, and via AES with OpenVMS V8.4.

> but it does not seem to generate an hmac-md5 string.

The integrated encryption wouldn't be where I'd look for that.  
OpenSSL, maybe OpenSSH, or possibly CDSA.  In decreasing order of 
likelihood.  But definitely not the traditional OpenVMS libraries.  
OpenVMS unfortunately doesn't particularly integrate network security, 
which is a problem for various reasons.

> I can load SSL or other tools if these libraries are needed.
> ...
> I would rather have a solution that I can call from my native VMS C 
> code and I hope that I'm just searching in the wrong place and this 
> group can point me to the correct place.

Maybe via OpenSSL and this 
<http://stackoverflow.com/questions/13555962/md5-hmac-with-openssl> 
code?

A quick look for the pieces, and at least some of what's needed appears 
to be present...

$ sear sys$share:*ssl*.exe EVP_md5/wind=0
SYS$COMMON:[SYSLIB]SSL$LIBCRYPTO_SHR.EXE;1
SYS$COMMON:[SYSLIB]SSL$LIBCRYPTO_SHR32.EXE;1
$ dir sys$common:[*...]hmac.h

Directory SYS$COMMON:[SSL.INCLUDE]

HMAC.H;1

Total of 1 file.
$

Some test data is available here
  <http://en.wikipedia.org/wiki/HMAC>

Some semi-related discussions
  <http://www.openssl.org/docs/apps/dgst.html>
  <http://labs.hoffmanlabs.com/node/992>
  <http://labs.hoffmanlabs.com/node/1853>


-- 
Pure Personal Opinion | HoffmanLabs LLC