[Microid] MicroID hashing algorithm(s) and normalization
Peter Saint-Andre
stpeter at jabber.org
Tue Dec 5 15:34:24 EST 2006
<snip/>
Regarding HMAC, read this (user-friendly intro):
http://en.wikipedia.org/wiki/HMAC
HMAC is not a hashing algorithm like the SHA family, it is a Message
Authentication Code (MAC) function. So HMAC uses a secret key in the MAC
generation process. For our purposes the question is: whose secret key?
I guess for microid it would be the key of the entity that generates the
microid. So if I visit yedda.com or whatever, the microid is generated
by Yedda and so Yedda uses its key in the microid generation process.
(It could also use a key provided by the other party, naturally, but in
consumer-oriented applications that may be less likely to succeed.)
Thoughts?
Peter
--
Peter Saint-Andre
Jabber Software Foundation
http://www.jabber.org/people/stpeter.shtml
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 7358 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.ibiblio.org/pipermail/microid/attachments/20061205/467bc7d9/attachment.bin
More information about the Microid
mailing list