llHMAC

Template:Needs Translation/LSL/de Template:Needs Translation/LSL/es Template:Needs Translation/LSL/el Template:Needs Translation/LSL/fr Template:Needs Translation/LSL/he Template:Needs Translation/LSL/it Template:Needs Translation/LSL/ko Template:Needs Translation/LSL/nl Template:Needs Translation/LSL/hu Template:Needs Translation/LSL/no Template:Needs Translation/LSL/da Template:Needs Translation/LSL/sv Template:Needs Translation/LSL/tr Template:Needs Translation/LSL/pl Template:Needs Translation/LSL/pt Template:Needs Translation/LSL/ru Template:Needs Translation/LSL/th Template:Needs Translation/LSL/uk Template:Needs Translation/LSL/zh-Hans Template:Needs Translation/LSL/zh-Hant

/LSL

HMAC

llHMAC

Summary

Function: string llHMAC( string secret, string msg, string algorithm );

0.0	Forced Delay
10.0	Energy

Returns a string that is the  Base64-encoded  HMAC hash of msg when using hash algorithm algorithm and secret string secret.

• string	secret
• string	msg
• string	algorithm

This function supports md5, sha1, sha224, sha256, sha384, sha512 for algorithm.

secret can be any string.

Caveats

• secret is passed in as UTF-8 (though stored in memory as UTF-16 in Mono).
  • If your secret is encoded in Base64 (as is common for HMAC applications), consider llBase64ToString, but be aware of its caveats.
  • If you are generating an HMAC hash on a different platform, you will need to ensure its implementation reads the secret as UTF-8 (or you will need to manually encode it into the correct format beforehand), or else the HMAC hashes will not match.
  • Since secret is not Base64, and LSL does not support "NUL" (U+0000) in strings, this function cannot calculate hashes with secrets that encode into UTF-8/16 as U+0000.

Examples

default
{
    state_entry()
    {
        string secret = "secret key";
        
        // Supported algorithims for llHMAC() include:
        // md5, sha1, sha224, sha256, sha384, sha512
        
        string algorithm = "sha1";
        string msg = "Hello, Avatar!";
        
        string digest = llHMAC(secret, msg, algorithm);
        
        // For the given secret/msg/algorithm, expect the HMAC
        // digest to be 'ffCDntkagRO5mIEtd2tYzM2Bg8I='
        llSay(0, "HMAC digest of message '" + msg + "' using algorithm "
            +  algorithm + " is " + digest);
    }
}

Notes

• This function performs no checks on secret; it can contain any value, or no value at all. Be sure to check that you are hashing using the correct secret.
• Since this function uses UTF-8 secrets, you should at a minimum follow "password rules": more entropy is usually better. If you need a guideline, 32+ random characters is likely enough.

See Also

Functions

•	llSignRSA
•	llVerifyRSA
•	llSHA1String
•	llSHA256String
•	llMD5String

Deep Notes

Signature
function string llHMAC( string secret, string msg, string algorithm );