3 ms·
That rule if for like, implementing AES on your own, not just using HMAC! No one is saying roll your own HMAC!
by williamcotton 12y ago
That rule if for like, implementing AES on your own, not just using HMAC! No one is saying roll your own HMAC!
- lvh 12y agoThat's a common misconception. While designing your own cipher or implementing AES is a terrible idea, it's fairly easy to produce broken systems with strong primitives like AES or HMAC, and the brokenness would not have anything to do with the implementation of those primitives.
- tomjen3 12y agoHow will you make a broken system with HMAC? Other than exposing the key or the data inside there really isn't that much you can do wrong with HMAC.