Actions
Task #5241
open
Redesign support for HMAC keys
Status:
New
Priority:
Normal
Assignee:
-
Category:
Security
Target version:
-
Start date:
Due date:
% Done:
0%
Estimated time:
Description
Our current approach was broken by OpenSSL 3.0, and a simple fix or workaround looks infeasible. A substantial redesign is needed.
One potential idea is to move the HMAC functionality out of transform::PrivateKey and into a new class SecretKey or SymmetricKey. This would completely separate symmetric keys (handled by the new class) from asymmetric keys (handled by PrivateKey), which probably makes sense given the fundamentally different nature of the two kinds of keys.
Updated by
Actions