If you specify a key for HMAC, the key is used only for HMAC calculation, and never leaves your browser. However, I'm not sure whether SHA-2 (particularly, SHA-256) is considered to satisfy (2) from their abstract, and thus whether HMAC-SHA2 (particularly, HMAC-SHA256) is a PRF. The minified UMD and ESM versions of the library with support for only the SHA-384 and SHA-512 hash variants.
0 kommentar(er)
