Milo

Appearance

std/hmac ​

HMAC (RFC 2104 / FIPS 198-1) over the pure-Milo hashes. The key is normalized to the hash's block (hashed if longer, zero-padded otherwise). Used for JWT (HS256/384/512), HKDF, PBKDF2, AWS SigV4, webhook signatures, and TOTP.

The block size is a property of the hash, not of HMAC: 64 bytes for SHA-1 and SHA-256, 128 for SHA-384 and SHA-512. Getting it wrong still produces a stable, plausible-looking MAC that no other implementation agrees with.

Compare a received MAC against a computed one with std/subtle's constantTimeEq, never ==.

milo
from "std/hmac" import { Hmac }

Checked against the RFC 4231 test vectors in tests/fixtures/hmacSha2Vectors.milo.

API reference ​

Hmac ​

milo
pub struct Hmac

Hmac namespace — Hmac.sha256(key,msg) hex, .sha256Bytes/.sha384Bytes/ .sha512Bytes/.sha1Bytes raw digests.

Hmac.sha1Bytes ​

milo
fn Hmac.sha1Bytes(key: &string, msg: &string): string

HMAC-SHA1, 20 raw bytes.

Needed by HOTP/TOTP (std/totp) and PBKDF2-HMAC-SHA1, both specified on SHA-1.

Hmac.sha256 ​

milo
fn Hmac.sha256(key: &string, msg: &string): string

HMAC-SHA256 as 64-char lowercase hex.

Hmac.sha256Bytes ​

milo
fn Hmac.sha256Bytes(key: &string, msg: &string): string

HMAC-SHA256, 32 raw bytes.

Hmac.sha384Bytes ​

milo
fn Hmac.sha384Bytes(key: &string, msg: &string): string

HMAC-SHA384, 48 raw bytes.

Hmac.sha512 ​

milo
fn Hmac.sha512(key: &string, msg: &string): string

HMAC-SHA512 as 128-char lowercase hex.

Hmac.sha512Bytes ​

milo
fn Hmac.sha512Bytes(key: &string, msg: &string): string

HMAC-SHA512, 64 raw bytes.