From df29e8f7455040bf20ddae7050c4be3e9251a3b5 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Wed, 29 Aug 2007 09:13:08 +0000 Subject: [PATCH] SHA-1 HMAC signature is now computed over concatenation of TEXT and RODATA segments --- src/libstrongswan/fips/fips.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/libstrongswan/fips/fips.c b/src/libstrongswan/fips/fips.c index d97e51c1c..3135a7738 100644 --- a/src/libstrongswan/fips/fips.c +++ b/src/libstrongswan/fips/fips.c @@ -74,8 +74,8 @@ bool fips_compute_hmac_signature(const char *key, char *signature) chunk_t signature_chunk = chunk_empty; signer->set_key(signer, hmac_key); - /* TODO include rodata_chunk in HMAC */ - signer->allocate_signature(signer, text_chunk, &signature_chunk); + signer->allocate_signature(signer, text_chunk, NULL); + signer->allocate_signature(signer, rodata_chunk, &signature_chunk); signer->destroy(signer); sprintf(signature, "%#B", &signature_chunk);