Tag Info

New answers tagged


First, you should always use HMAC with the secret data as the key and the (possibly) public data as the message. The proof of its security relies on that. So rather than concatenating the static key to the message, you might want to consider concatenating it to the secret key. Second, the extra hash doesn't add any security. Anyone who knows the secret key ...

Top 50 recent answers are included