[Microid] MicroID hashing algorithm(s) and normalization

Peter Saint-Andre stpeter at jabber.org
Tue Dec 5 15:34:24 EST 2006


<snip/>

Regarding HMAC, read this (user-friendly intro):

http://en.wikipedia.org/wiki/HMAC

HMAC is not a hashing algorithm like the SHA family, it is a Message
Authentication Code (MAC) function. So HMAC uses a secret key in the MAC
generation process. For our purposes the question is: whose secret key?
I guess for microid it would be the key of the entity that generates the
microid. So if I visit yedda.com or whatever, the microid is generated
by Yedda and so Yedda uses its key in the microid generation process.
(It could also use a key provided by the other party, naturally, but in
consumer-oriented applications that may be less likely to succeed.)

Thoughts?

Peter

-- 
Peter Saint-Andre
Jabber Software Foundation
http://www.jabber.org/people/stpeter.shtml

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 7358 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.ibiblio.org/pipermail/microid/attachments/20061205/467bc7d9/attachment.bin 


More information about the Microid mailing list