HMACSHA1 function using the ABL SHA1-DIGEST

[s pareek]

Would there be something for progress ver 9.1e users for hash SHA1 algorithm ?

 

[TomBascom]

Roll your own...

Or upgrade to a modern release of Progress.

Version 9 is ancient, obsolete and unsupported. It was designed and first released in the 90s. "Y2K" was the big worry. "The Internet" was brand new. The Spice Girls were hot. Security was an after-thought.

 

[Cecil]

If you are using OpenEdge 11.7.4 you can now do this:

DEFINE VARIABLE chJSONData AS CHARACTER   NO-UNDO.
DEFINE VARIABLE chKey AS CHARACTER   NO-UNDO.
DEFINE VARIABLE lcLong AS LONGCHAR   NO-UNDO.

chJSONData = '{data:"somedatahere"}'.
chKey      = "ApplicationKey"  .

lcLong = HEX-ENCODE(MESSAGE-DIGEST("HMAC-SHA-256" , chJSONData, chKey)).

MESSAGE STRING(chLong).

 

[GillesQ]

I have a customer who is still running 11.5 in production so I'm stuck with the old method. I found the result of the HMAC-SHA-256 is different when using a key larger than 64 bytes. The problem comes from the correction for large keys:

    /* correction by Valery A.Eliseev */
    IF LENGTH(pcKey) > {&xiBlockSize} THEN
    DO:
        set-size(mData) = LENGTH(pcKey).
        put-string(mData, 1, LENGTH(pcKey)) = pcKey.
        // Only valid for HMAC-SHA-1 
        // rRawDataSHA = SHA1-DIGEST(mData).
        rRawDataSHA = MESSAGE-DIGEST('SHA-256', mData).
        PUT-BYTES(mKey, 1) = rRawDataSHA.
    END.

 

[Cecil]

Hi I wrote this function for a particular purpose over 15 years ago . I’m still amazed today that it’s being used.

Is it possible that you could use an alternative method like .net?

Before I wrote the function many many years ago, i used a command line utility to do the hashing, maybe something like that still exist today as alternative workaround?

 

[GillesQ]

I wrote this function for a particular purpose over 15 years ago . I’m still amazed today that it’s being used.

I'm glad you did that, very useful !

Is it possible that you could use an alternative method like .net?
Before I wrote the function many many years ago, i used a command line utility to do the hashing, maybe something like that still exist today as alternative workaround?

Customer is using AIX, so no .Net here. They will migrate to OE 11.7 (and then to 12) in a couple months, so this code will be replaced with the builtin version.