Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support untruncated responses #116

Open
stv0g opened this issue May 15, 2024 · 1 comment
Open

Support untruncated responses #116

stv0g opened this issue May 15, 2024 · 1 comment

Comments

@stv0g
Copy link

stv0g commented May 15, 2024

I would like to generate a SHA256 HMAC using the app and retrieve the full digest.

This seems to be currently not possible.

YKOATH supports this by enabling/disabling the dynamic truncation via P2 of the calculate instruction. However, The Trussed secrets apps unconditionally performs dynamic truncation.

This would also allow us to ditch the Yubico-specific HMAC instruction and just use TOTP credentials where we pass a custom challenge.

The Yubico-specific HMAC instruction currently only supports SHA1 which is a no-go for my use case :/

@stv0g
Copy link
Author

stv0g commented May 15, 2024

Btw, my use case is the calculation of AWS HMAC request signatures:
https://docs.aws.amazon.com/AmazonSimpleDB/latest/DeveloperGuide/HMACAuth.html

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant