Blake2b with key

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

Blake2b with key

van Hemel, Wouter J M
Hello,

I'm trying to create a blake2b512 digest with a key. I've made an attempt to follow the source code and I'm assuming the algorithm's name for blake2b MAC is blake2bmac, though I have tried different values. I don't seem to be able to create a valid checksum:

$ openssl version; echo -n "hello" | openssl dgst -blake2b512 -mac blake2bmac -macopt key:secret
OpenSSL 1.1.1d  10 Sep 2019
Algorithm blake2bmac not found

Is keyed blake2b supported in openssl-dgst (latest OpenSSL release)?

Thanks!
Reply | Threaded
Open this post in threaded view
|

Re: Blake2b with key

Richard Levitte - VMS Whacker-2
On Tue, 08 Oct 2019 15:44:23 +0200,
van Hemel, Wouter J M wrote:

>
> Hello,
>
> I'm trying to create a blake2b512 digest with a key. I've made an attempt to follow the source code and I'm assuming the algorithm's name for blake2b MAC is blake2bmac, though I have tried different values. I don't seem to be able to create a valid checksum:
>
> $ openssl version; echo -n "hello" | openssl dgst -blake2b512 -mac blake2bmac -macopt key:secret
> OpenSSL 1.1.1d  10 Sep 2019
> Algorithm blake2bmac not found
>
> Is keyed blake2b supported in openssl-dgst (latest OpenSSL release)?

No, sorry.  It has been added for upcoming OpenSSL 3.0, though.

Cheers,
Richard

--
Richard Levitte         [hidden email]
OpenSSL Project         http://www.openssl.org/~levitte/
Reply | Threaded
Open this post in threaded view
|

Re: Blake2b with key

Blumenthal, Uri - 0553 - MITLL
 >   > Is keyed blake2b supported in openssl-dgst (latest OpenSSL release)?
   
 >   No, sorry.  It has been added for upcoming OpenSSL 3.0, though.
   
Doesn't look like it's there:

$ openssl3 version
OpenSSL 3.0.0-dev xx XXX xxxx (Library: OpenSSL 3.0.0-dev xx XXX xxxx)
$ echo -n "hello" | openssl3 dgst -blake2b512
BLAKE2b512(stdin)= e4cfa39a3d37be31c59609e807970799caa68a19bfaa15135f165085e01d41a65ba1e1b146aeb6bd0092b49eac214c103ccfa3a365954bbbe52f74a2b3620c94
$ echo -n "hello" | openssl3 dgst -blake2b512 -mac blake2bmac -macopt key:secret
Algorithm blake2bmac not found
$

Besides, how does one print a list of supported MAC algorithms?

 



smime.p7s (6K) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: Blake2b with key

Blumenthal, Uri - 0553 - MITLL
Answered my own questions:

$ openssl3 list -mac-algorithms
Provided MACs:
  BLAKE2bMAC @ default
  BLAKE2sMAC @ default
  CMAC @ default
  GMAC @ default
  HMAC @ default
  KMAC128 @ default
  KMAC256 @ default
  Poly1305 @ default
  SipHash @ default
$
$ echo -n "hello" | openssl3 mac -macopt key:secret blake2bmac

6EDF9AA44DFC7590DE00FCFDBE2F0D917CDEEB170301416929CC625D19D24EDC1040FF760C1F9BB61AD439A0AF5D492FBB01B46ED3FEB4E6076383B7885A9486
$


´╗┐On 10/8/19, 11:03 AM, "Uri Blumenthal" <[hidden email]> wrote:

     >   > Is keyed blake2b supported in openssl-dgst (latest OpenSSL release)?
       
     >   No, sorry.  It has been added for upcoming OpenSSL 3.0, though.
       
    Doesn't look like it's there:
   
    $ openssl3 version
    OpenSSL 3.0.0-dev xx XXX xxxx (Library: OpenSSL 3.0.0-dev xx XXX xxxx)
    $ echo -n "hello" | openssl3 dgst -blake2b512
    BLAKE2b512(stdin)= e4cfa39a3d37be31c59609e807970799caa68a19bfaa15135f165085e01d41a65ba1e1b146aeb6bd0092b49eac214c103ccfa3a365954bbbe52f74a2b3620c94
    $ echo -n "hello" | openssl3 dgst -blake2b512 -mac blake2bmac -macopt key:secret
    Algorithm blake2bmac not found
    $
   
    Besides, how does one print a list of supported MAC algorithms?
   
     
   
   
   

smime.p7s (6K) Download Attachment