Re: gc-pbkdf2-sha1 is deprecated

[Bruce Korb]

gnu-pw-mgr fatal error:
gc_pbkdf2_hmac returned error code 5

(5 --> GC_INVALID_HASH)

I think they work differently.


    rc = gc_pbkdf2_hmac(GC_SHA1,
                        hash_source, hash_src_len,
                        salt,        salt_len,
                        OPT_VALUE_PBKDF2,// <-- pbkdf2 reprocessing count
                        hash_output, hash_out_len);
    if (rc != GC_OK)
        die(GNU_PW_MGR_EXIT_INVALID, pbkdf2_err_fmt, rc);

On 9/18/20 9:32 AM, Bruno Haible wrote:
> Hi Bruce,
>
> > Next question: what do I do about crypto/gc-pbkdf2-sha1? It is labeled
> > as "deprecated", but I need a function that produces precisely the same
> > result. It really doesn't matter to me that folks have figured out how
> > to jigger a file to produce an arbitrary sha1 sum. I only need a fairly
> > random result from summing a few tens of bytes of text. So as long as
> > "deprecate" doesn't mean it's going away, I'm fine.
> It may go away, because the module crypto/gc-pbkdf2 contains more generic
> API to do the same thing: gc_pbkdf2_hmac with first argument GC_SHA1.
>
> Bruno