On Thu, 7 May 2009, Daniel Stenberg wrote:

>         libssh2_sha1_init(&ctx);
>         libssh2_sha1_update(ctx, node->salt, node->salt_len);
>         libssh2_sha1_update(ctx, host, strlen(host));
>         libssh2_sha1_final(ctx, hash);

Oops, I find the flaw. My code should instead do:

           libssh2_hmac_sha1_init(&ctx, node->salt, node->salt_len);
           libssh2_hmac_update(ctx, host, strlen(host));
           libssh2_hmac_final(ctx, hash);
           libssh2_hmac_cleanup(&ctx);

Thanks for listening! ;-)

-- 

  / daniel.haxx.se

------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image 
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
libssh2-devel mailing list
libssh2-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/libssh2-devel
  • SHA1 diffs Daniel Stenberg
    • Re: SHA1 diffs Daniel Stenberg

Reply via email to