Re: Cleaning up usage of CMAC_xxx

2020-06-12 Thread Hal Murray
Thanks. > and a CMAC key using the function EVP_PKEY_new_CMAC_key(): That's the step I was missing. Right in front of my eyes. I'm still missing something though. Does this look reasonable: cipher = EVP_aes_128_cbc(); pkey = EVP_PKEY_new_CMAC_key(NULL, key, keylength, cipher); ctx

Re: Cleaning up usage of CMAC_xxx

2020-06-12 Thread Matt Caswell
On 12/06/2020 00:27, Hal Murray wrote: > > levi...@openssl.org said: >> In 1.1.1 and earlier, there is a different idea, using EVP_PKEY routines to >> "sign" with a MAC. We have a EVP_PKEY to EVP_MAC bridge in 3.0.0 to bridge >> the gap. > > Thanks, but... > > The EVP_PKEY seems to assume a

Re: Cleaning up usage of CMAC_xxx

2020-06-11 Thread Hal Murray
levi...@openssl.org said: > In 1.1.1 and earlier, there is a different idea, using EVP_PKEY routines to > "sign" with a MAC. We have a EVP_PKEY to EVP_MAC bridge in 3.0.0 to bridge > the gap. Thanks, but... The EVP_PKEY seems to assume a public/private key environment. The man page for EVP_

Re: Cleaning up usage of CMAC_xxx

2020-06-11 Thread Richard Levitte
On Thu, 11 Jun 2020 02:49:04 +0200, Hal Murray wrote: > CMAC_* have been DEPRECATED for 3.0.0 > > CHANGES.md suggests using EVP_MAC_xxx. Mostly, that seems reasonable, but > there is one loose end. > > CMAC_Init includes a key and cipher. What's the equivalent in EVP_MAC_xxx? > > ---

Cleaning up usage of CMAC_xxx

2020-06-10 Thread Hal Murray
CMAC_* have been DEPRECATED for 3.0.0 CHANGES.md suggests using EVP_MAC_xxx. Mostly, that seems reasonable, but there is one loose end. CMAC_Init includes a key and cipher. What's the equivalent in EVP_MAC_xxx? --- I found the params stuff, but that's new in 3.0.0 How do I do it in