Re: gc-pbkdf2-sha1 is deprecated

[Bruce Korb <bkorb@gnu.org>]

gnu-pw-mgr fatal error:
gc_pbkdf2_hmac returned error code 5

(5 --> GC_INVALID_HASH)

I think they work differently.


     rc = gc_pbkdf2_hmac(GC_SHA1,
                         hash_source, hash_src_len,
                         salt,        salt_len,
                         OPT_VALUE_PBKDF2,// <-- pbkdf2 reprocessing count
                         hash_output, hash_out_len);
     if (rc != GC_OK)
         die(GNU_PW_MGR_EXIT_INVALID, pbkdf2_err_fmt, rc);

On 9/18/20 9:32 AM, Bruno Haible wrote:
> Hi Bruce,
>
>> Next question: what do I do about crypto/gc-pbkdf2-sha1? It is labeled
>> as "deprecated", but I need a function that produces precisely the same
>> result. It really doesn't matter to me that folks have figured out how
>> to jigger a file to produce an arbitrary sha1 sum. I only need a fairly
>> random result from summing a few tens of bytes of text. So as long as
>> "deprecate" doesn't mean it's going away, I'm fine.
> It may go away, because the module crypto/gc-pbkdf2 contains more generic
> API to do the same thing: gc_pbkdf2_hmac with first argument GC_SHA1.
>
> Bruno
>
>