[TYPO3-core] RFC #12502: Feature: Use HMACs for authencity and integrity checks
Martin Kutschker
masi-no at spam-typo3.org
Sat Nov 7 19:31:46 CET 2009
Marcus Krause schrieb:
>
>
> Advantages of HMACs in TYPO3:
> * having a dedicated method for integrity and authencity checks on data
> * raising the awareness of HMACs and thus make them easily useable by
> creating a t3lib_div method
> * using one API method enables us to easily switch to a different
> hashing algorithm in future
But isn't it a problem that different hash algorithms return different digest lengths?
Perhaps it is better to remove the $len (should be $length BTW) argument and document the max.
length the calling code has to provide space for.
Masi
More information about the TYPO3-team-core
mailing list