[openssl-dev] Variable length of digest

Victor Wagner vitus at wagner.pp.ru
Thu Dec 24 08:02:15 UTC 2015


On Thu, 24 Dec 2015 10:45:37 +0300
Dmitry Belyavsky <beldmit at gmail.com> wrote:


> >
> > If there's a new construct whose output size depends on the input
> > data, that probably requires a new family of functions.
> >  
> 
> Well, the gost-mac is treated specially itself and may be it can be
> simplified introducing the new construction.

Really it is MAC. I.e. it is combination of digest and pkey algorithms,
and digest itself is never seen by any application. Applications only
access MAC value via EVP_DigestSignFinal  interface. And it already
allows variable size of signature.



More information about the openssl-dev mailing list