hmacsha1

I'm trying to send a SOAP request via Node, talking to a service which is secured with WSS. I need to sign the XML response with a SignedInfo element which requires me combining a Nonce Binary secret I generated, with a Nonce binary secret returned from the initial token request - PSHA1 format. I've been able to validate this using Java, by utilising the following class (Where the secret is my client nonce and the seed is the server nonce): https://github.com/apache/wss4j/blob/trunk/ws-security-common/src/main/java/org/apache/wss4j/common/derivedKey/P_SHA1.java#L57 With the following Java code

I am trying to interface with a TransUnion web service and I need to provide a HMAC-SHA1 signature to access it. This example is in the TransUnion documentation: Input of SampleIntegrationOwner2008‐11‐18T19:14:40.293Z with security key xBy/2CLudnBJOxOtDhDRnsDYq9HTuDVr2uCs3FMzoxXEA/Od9tOuwSC70+mIfpjeG68ZGm/PrxFf/s/CzwxF4Q== creates output of /UhwvT/kY9HxiXaOjpIc/BarBkc= . Given that data and key, I cannot get this same result in Java. I have tried several online calculators, and none of them return this result either. Is the example in their documentation incorrect, or am I just not handling

So I'm trying to use PBKDF2 to derive a key given a base64 string of 256bits. I am able to use C#'s Rfc2898DeriveBytes and node-crypto's pbkdf2 to derive the same key, however, I can't say the same for C++. I'm not sure if I'm doing wrong conversions or using the functions improperly, but I'll let you guys look at it. C++ /* 256bit key */ string key = "Y1Mjycd0+O+AendY5pB58JMlmS0EmBWgjdj2r2KW6qQ="; string decodedKey; StringSource(key, true, new Base64Decoder(new StringSink(decodedKey))); const byte* keyByte = (const byte*) decodedKey.data(); /* Generate IV */ /* AutoSeededRandomPool prng; byte

Need help on this .... I need to get json data from API call from a URL. It said the called need.. Content-Type : application/x-www-form-urlencoded HTTP HEADERS : key ---> APIKEY HTTP HEADERS : sig ---> HMAC-SHA1 signature of POST Data with SECRET KEY POST PARAMETER: timestamp ----> Current Unix Timestamp Do I do this correctly? But how to implement point 3 above??? $key = 'APIKEY'; $secret = 'APISECRET'; $signature = ''; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "https://www.domain.com/getticker"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE); curl_setopt($ch, CURLOPT_HEADER, FALSE);

I'm trying to convert an ASP/VBScript OAuth library to VBA. One of the challenges is this line of code: Get_Signature = b64_hmac_sha1(strSecret, strBaseSignature) This function, b64_hmac_sha1 is actually a function contained in a JavaScript library. It appears to me that calling a JavaScript function from VBA is fairly impractical. Because I know so little about encryption, it's not even clear to me what this b64_hmac_sha1 function does. Is HMAC SHA1 different from SHA1? I half suspect I might be able to find some VBA code online to do what I need to do if I just understood what this function

I'm trying to create a HMAC SHA-1 hash of a string in Swift but can't figure out how to interact with the APIs as it doesn't seem to be importing the CommonCrypto framework. I've tried various different forms of "import CommonCrypto" and creating a bridging header file but none of it made a difference. The odd thing is that if I create an Objective-C class, I'm able to interact with APIs without any problems, so this seems to be unique to Swift. Also if anyone could tell me what the equivalent of uint8_t digest[CC_SHA1_DIGEST_LENGTH] is in Swift I'd be very grateful You can do it in Swift.