diff options
author | Steven Fackler <sfackler@gmail.com> | 2016-12-31 09:44:57 -0800 |
---|---|---|
committer | Steven Fackler <sfackler@gmail.com> | 2016-12-31 09:44:57 -0800 |
commit | 5c49b58a88e5e30c695b0f5a5fc6bb267efe8a84 (patch) | |
tree | c8f7555a1140813d296ae971b415833bb28175fa /openssl/src/sign.rs | |
parent | 283036c5ad5b2dacddd50cbc679aafa633db00f5 (diff) | |
download | rust-openssl-5c49b58a88e5e30c695b0f5a5fc6bb267efe8a84.zip |
Indicate that memcmp::eq should be used for HMACs
Diffstat (limited to 'openssl/src/sign.rs')
-rw-r--r-- | openssl/src/sign.rs | 13 |
1 files changed, 10 insertions, 3 deletions
diff --git a/openssl/src/sign.rs b/openssl/src/sign.rs index ca7986ca..ec37c885 100644 --- a/openssl/src/sign.rs +++ b/openssl/src/sign.rs @@ -35,12 +35,13 @@ //! assert!(verifier.finish(&signature).unwrap()); //! ``` //! -//! Compute an HMAC (note that `Verifier` cannot be used with HMACs): +//! Compute an HMAC: //! //! ```rust -//! use openssl::sign::Signer; -//! use openssl::pkey::PKey; //! use openssl::hash::MessageDigest; +//! use openssl::memcmp; +//! use openssl::pkey::PKey; +//! use openssl::sign::Signer; //! //! // Create a PKey //! let key = PKey::hmac(b"my secret").unwrap(); @@ -53,6 +54,12 @@ //! signer.update(data).unwrap(); //! signer.update(data2).unwrap(); //! let hmac = signer.finish().unwrap(); +//! +//! // `Verifier` cannot be used with HMACs; use the `memcmp::eq` function instead +//! // +//! // Do not simply check for equality with `==`! +//! # let target = hmac.clone(); +//! assert!(memcmp::eq(&hmac, &target)); //! ``` use ffi; use std::io::{self, Write}; |