7067 - CRE Module IP: How to check and compute the HMAC-SHA256 value generated by CRE Module IP?

User may use conventional online OpenSSL or HMAC generator to calculate the HMAC-SHA256 value.

However, few things to take note with OpenSSL vs Online HMAC generator:

1.       Online HMAC generator key is in string format while OpenSSL can be either hex or string

2.       OpenSSL plaintext code is store in a file. There must not be any additional line or spacing after the code. The additional char spacing will be taken into hash computation resulting in different signature

Online HMAC Generator Example 

Both online tools generated the same hashed output as shown below:

Secret key: 04EB9FFD13B40022D349833BB353A4CD7C1AEE5CB7AEE3E1ACED216487F77C99

 

Plain text: 112233445566778899AABBCCDDEEFF00112233445566778899AABBCCDDEEFF00

https://www.devglan.com/online-tools/hmac-sha256-online

https://www.freeformatter.com/hmac-generator.html#before-output

OpenSSL Crypto Library Example

Installation guide:

Linux: https://raspberrytips.com/installing-openssl-on-linux/

Windows: https://thesecmaster.com/blog/procedure-to-install-openssl-on-the-windows-platform

Example command: openssl dgst -sha256 -mac HMAC -macopt hexkey:<secret_key> <plain_text_file>

https://www.openssl.org/docs/man1.1.1/man1/openssl-dgst.html

Example below used string instead of hex format to align the output result with online tool.

openssl dgst -sha256 -mac HMAC -macopt key:04EB9FFD13B40022D349833BB353A4CD7C1AEE5CB7AEE3E1ACED216487F77C99 test.txt

• Related Articles

• 6958 - MachXO3D: Does the raw TRNG output always go through SHA-256 as a conditioner?

  Yes, for the customer side only. The customer API for our customers ALWAYS goes thru SHA-256 as a conditioner/whitener.

• 7233 - Where to check the list of supported SPI Flash?

  You can check the supported devices in our Radiant/Diamond Programmer and choose Device Family to "SPI Serial Flash" then check for the different vendors for the Flash family supported. Example on Radiant Programmer you can also check in the ...

• 7357 - All Nexus: What are the input and output signals timing sensitivity of SEDC IP?

  All SEDC input signals will be accepted asynchronously since they will be synced automatically by the SEDC IP internal synchronizer, while SEDC output signals will be synchronous with the input clock (cfg_clk_o of the internal oscillator).

• 7026 - MachXO5-NX: How to fix read access issue with Flash Access IP when lmmi_clk_i is 50 MHz?

  Problem: When using internal flash in hardware, reading is wrong when using 50 MHz lmmi_clk_i. Solution:When experiencing an issue with Flash Access IP at 50 MHz clock, update CONFIG_IOSLEW setting at Device Constraint Editor from SLOW to FAST. See ...

• 6219 - Certus-NX: what is the value of the SPI timing parameter tMWC?

  The measurement of tMWC show no extra MCLK after DONE goes high. With that, the value of tMWC is approximately zero.