Security & CryptoLesson 340Free preview

HMAC Generator

This lesson is part of Web Developer Tools · All levels

Summary

HMAC is a message authentication code that combines hash functions with a secret key. The results prove that the message was unchanged and actually came from the same key holder. HMAC does not encrypt data, so the message content must remain otherwise protected if it is confidential.

Key points

HMAC verifies the integrity and authenticity of the message
The sender and the receiver must have the same secret key
HMAC-SHA256 is a common choice for API signatures
Signature comparisons should be made constantly
HMAC is not encrypted and cannot return the message content

Full lesson

Code examples and quizzes

Full lessons, code examples, and quizzes are available to subscribers. 5 questions.