[TYPO3-core] RFC #12502: Feature: Use HMACs for authencity and integrity checks

Martin Kutschker masi-no at spam-typo3.org
Sat Nov 7 19:31:46 CET 2009


Marcus Krause schrieb:
> 
> 
> Advantages of HMACs in TYPO3:
> * having a dedicated method for integrity and authencity checks on data
> * raising the awareness of HMACs and thus make them easily useable by
> creating a t3lib_div method
> * using one API method enables us to easily switch to a different
> hashing algorithm in future

But isn't it a problem that different hash algorithms return different digest lengths?

Perhaps it is better to remove the $len (should be $length BTW) argument and document the max.
length the calling code has to provide space for.

Masi


More information about the TYPO3-team-core mailing list