Re: HMAC verification with EVP Interface

[Ken Goldman]

On 8/26/2021 5:35 AM, d0 wrote:

Don't forget to use CRYPTO_memcmp for comparing the HMACs, not regular
ol' memcmp.

What's the rationale?  The HMAC result isn't secret.