[OpenID] Problem creating enc_mac_key

[Breno de Medeiros]

The value description is correct.  You hash the Dh secret and xor with the
key.

If you are doing that and still getting errors, you are probably using an
incorrect representation for the Dh secret.  The spec says that the binary
representation should be non-negative if interpreted as an extended integer
in 2-complement notation (or so I seem to recall)

On May 6, 2009 5:46 AM, "coen at rtlinteractief.nl" <coen at rtlinteractief.nl>
wrote:

 Hi,

I've trouble understanding how to build the enc_mac_key element for the
association. How I read the specs, the value and description of the element
do not seem to match. My test client is also not very helpful since it
immediately jumps to check_immediate without an assoc_handle which means
something went wrong with the association.

I read something like this:
the value says I should XOR the Mac key with my hashed, secret DH key.
the description says I should encrypt my Mac key with my secret DH key and
then hash the result, although I'm not entirely sure where the hashing goes
here.

Can somebody explain, perhaps in pseudo code, how to build/assemble the
enc_mac_key? Again, sorry for the n00b level.

Thanks a bunch!

 --
Met vriendelijke groet / With kind regards / mit besten Grüßen,




 Coen Schalkwijk
Software Engineer
 coen.schalkwijk at rtl.nl
 coen at rtlinteractief.nl
 +31 (0)35 671 8915

_______________________________________________
general mailing list
general at openid.net
http://openid.net/mailman/listinfo/general
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20090506/270358c0/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 389 bytes
Desc: not available
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20090506/270358c0/attachment-0002.gif>