Strange behaviour in php hash_hmac
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}
1
I am creating a simple api in php.
$signature_string = "MARCIGETapi/v1/test/636779232000000000FIXXISOFTRGllcyBpc3QgZWluIFRlc3Q="
$new_sig = hash_hmac("sha256", $signature_string, $api_key, false);
echo $new_sig;
24f305d19cad2e848b3407f64bc21ada0ff1978a2487a23f26aa35f3a1c8204a
Now explain me this:
$new_sig = hash_hmac("sha256", "MARCIGETapi/v1/test/636779232000000000FIXXISOFTRGllcyBpc3QgZWluIFRlc3Q=" , $api_key, false);
echo $new_sig;
c1d2347e60a648838fd8a98a41174fc9a4b18371e18261931f3337951b8a6cdf
The second one is the expected one I was able to generate on the c# client.
php sha256 hmac
asked Nov 16 '18 at 18:49
Felix D.Felix D.
2,70122250
add a comment |
1
I am creating a simple api in php.
$signature_string = "MARCIGETapi/v1/test/636779232000000000FIXXISOFTRGllcyBpc3QgZWluIFRlc3Q="
$new_sig = hash_hmac("sha256", $signature_string, $api_key, false);
echo $new_sig;
24f305d19cad2e848b3407f64bc21ada0ff1978a2487a23f26aa35f3a1c8204a
Now explain me this:
$new_sig = hash_hmac("sha256", "MARCIGETapi/v1/test/636779232000000000FIXXISOFTRGllcyBpc3QgZWluIFRlc3Q=" , $api_key, false);
echo $new_sig;
c1d2347e60a648838fd8a98a41174fc9a4b18371e18261931f3337951b8a6cdf
The second one is the expected one I was able to generate on the c# client.
php sha256 hmac
asked Nov 16 '18 at 18:49
Felix D.Felix D.
2,70122250
1
Please provide a MCVE of this problem. It shouldn't create a different hash just because the value is saved in a variable first. Maybe the$signature_stringvariable or the$api_keyvariable is changing.
– Progman
Nov 16 '18 at 18:57
i am pretty sure this can me reproduced using any string as api_key. I am 100% sure the data is the same (api_key is used both times). the 2 snippets are right after each other and api_key is never altered.
– Felix D.
Nov 16 '18 at 19:00
It can not be reproduced with just these code blocks. They will return the same hash, regardless if the message is written directly in thehash_hmac()call or via a variable. Please provide a MCVE.
– Progman
Nov 16 '18 at 19:03
1
WFM: 3v4l.org/okmLH
– Sammitch
Nov 16 '18 at 19:05
add a comment |
1
1
1
I am creating a simple api in php.
$signature_string = "MARCIGETapi/v1/test/636779232000000000FIXXISOFTRGllcyBpc3QgZWluIFRlc3Q="
$new_sig = hash_hmac("sha256", $signature_string, $api_key, false);
echo $new_sig;
24f305d19cad2e848b3407f64bc21ada0ff1978a2487a23f26aa35f3a1c8204a
Now explain me this:
$new_sig = hash_hmac("sha256", "MARCIGETapi/v1/test/636779232000000000FIXXISOFTRGllcyBpc3QgZWluIFRlc3Q=" , $api_key, false);
echo $new_sig;
c1d2347e60a648838fd8a98a41174fc9a4b18371e18261931f3337951b8a6cdf
The second one is the expected one I was able to generate on the c# client.
php sha256 hmac
asked Nov 16 '18 at 18:49
Felix D.Felix D.
2,70122250
I am creating a simple api in php.
$signature_string = "MARCIGETapi/v1/test/636779232000000000FIXXISOFTRGllcyBpc3QgZWluIFRlc3Q="
$new_sig = hash_hmac("sha256", $signature_string, $api_key, false);
echo $new_sig;
24f305d19cad2e848b3407f64bc21ada0ff1978a2487a23f26aa35f3a1c8204a
Now explain me this:
$new_sig = hash_hmac("sha256", "MARCIGETapi/v1/test/636779232000000000FIXXISOFTRGllcyBpc3QgZWluIFRlc3Q=" , $api_key, false);
echo $new_sig;
c1d2347e60a648838fd8a98a41174fc9a4b18371e18261931f3337951b8a6cdf
The second one is the expected one I was able to generate on the c# client.
php sha256 hmac
php sha256 hmac
asked Nov 16 '18 at 18:49
Felix D.Felix D.
2,70122250
asked Nov 16 '18 at 18:49
Felix D.Felix D.
2,70122250
asked Nov 16 '18 at 18:49
Felix D.Felix D.
2,70122250
asked Nov 16 '18 at 18:49
Felix D.Felix D.
2,70122250
asked Nov 16 '18 at 18:49
Felix D.Felix D.
2,70122250
2,70122250
1
Please provide a MCVE of this problem. It shouldn't create a different hash just because the value is saved in a variable first. Maybe the$signature_stringvariable or the$api_keyvariable is changing.
– Progman
Nov 16 '18 at 18:57
i am pretty sure this can me reproduced using any string as api_key. I am 100% sure the data is the same (api_key is used both times). the 2 snippets are right after each other and api_key is never altered.
– Felix D.
Nov 16 '18 at 19:00
It can not be reproduced with just these code blocks. They will return the same hash, regardless if the message is written directly in thehash_hmac()call or via a variable. Please provide a MCVE.
– Progman
Nov 16 '18 at 19:03
1
WFM: 3v4l.org/okmLH
– Sammitch
Nov 16 '18 at 19:05
add a comment |
1
Please provide a MCVE of this problem. It shouldn't create a different hash just because the value is saved in a variable first. Maybe the$signature_stringvariable or the$api_keyvariable is changing.
– Progman
Nov 16 '18 at 18:57
i am pretty sure this can me reproduced using any string as api_key. I am 100% sure the data is the same (api_key is used both times). the 2 snippets are right after each other and api_key is never altered.
– Felix D.
Nov 16 '18 at 19:00
It can not be reproduced with just these code blocks. They will return the same hash, regardless if the message is written directly in thehash_hmac()call or via a variable. Please provide a MCVE.
– Progman
Nov 16 '18 at 19:03
1
WFM: 3v4l.org/okmLH
– Sammitch
Nov 16 '18 at 19:05
1
1
Please provide a MCVE of this problem. It shouldn't create a different hash just because the value is saved in a variable first. Maybe the
$signature_string variable or the $api_key variable is changing.– Progman
Nov 16 '18 at 18:57
Please provide a MCVE of this problem. It shouldn't create a different hash just because the value is saved in a variable first. Maybe the
$signature_string variable or the $api_key variable is changing.– Progman
Nov 16 '18 at 18:57
i am pretty sure this can me reproduced using any string as api_key. I am 100% sure the data is the same (api_key is used both times). the 2 snippets are right after each other and api_key is never altered.
– Felix D.
Nov 16 '18 at 19:00
i am pretty sure this can me reproduced using any string as api_key. I am 100% sure the data is the same (api_key is used both times). the 2 snippets are right after each other and api_key is never altered.
– Felix D.
Nov 16 '18 at 19:00
It can not be reproduced with just these code blocks. They will return the same hash, regardless if the message is written directly in the
hash_hmac() call or via a variable. Please provide a MCVE.– Progman
Nov 16 '18 at 19:03
It can not be reproduced with just these code blocks. They will return the same hash, regardless if the message is written directly in the
hash_hmac() call or via a variable. Please provide a MCVE.– Progman
Nov 16 '18 at 19:03
1
1
WFM: 3v4l.org/okmLH
– Sammitch
Nov 16 '18 at 19:05
WFM: 3v4l.org/okmLH
– Sammitch
Nov 16 '18 at 19:05
add a comment |
1 Answer
1
active
oldest
votes
0
I`ve had the same problems in one of my projects.
Just try:
$new_sig = hash_hmac("sha256", trim($signatur_string," "), $api_key);
answered Nov 16 '18 at 19:04
Marcel MerzMarcel Merz
10011
Then this is a completely different problem with your input.
– Sammitch
Nov 16 '18 at 19:06
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53343753%2fstrange-behaviour-in-php-hash-hmac%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
0
I`ve had the same problems in one of my projects.
Just try:
$new_sig = hash_hmac("sha256", trim($signatur_string," "), $api_key);
answered Nov 16 '18 at 19:04
Marcel MerzMarcel Merz
10011
Then this is a completely different problem with your input.
– Sammitch
Nov 16 '18 at 19:06
add a comment |
0
I`ve had the same problems in one of my projects.
Just try:
$new_sig = hash_hmac("sha256", trim($signatur_string," "), $api_key);
answered Nov 16 '18 at 19:04
Marcel MerzMarcel Merz
10011
Then this is a completely different problem with your input.
– Sammitch
Nov 16 '18 at 19:06
add a comment |
0
0
0
I`ve had the same problems in one of my projects.
Just try:
$new_sig = hash_hmac("sha256", trim($signatur_string," "), $api_key);
answered Nov 16 '18 at 19:04
Marcel MerzMarcel Merz
10011
I`ve had the same problems in one of my projects.
Just try:
$new_sig = hash_hmac("sha256", trim($signatur_string," "), $api_key);
answered Nov 16 '18 at 19:04
Marcel MerzMarcel Merz
10011
answered Nov 16 '18 at 19:04
Marcel MerzMarcel Merz
10011
answered Nov 16 '18 at 19:04
Marcel MerzMarcel Merz
10011
answered Nov 16 '18 at 19:04
Marcel MerzMarcel Merz
10011
10011
Then this is a completely different problem with your input.
– Sammitch
Nov 16 '18 at 19:06
add a comment |
Then this is a completely different problem with your input.
– Sammitch
Nov 16 '18 at 19:06
Then this is a completely different problem with your input.
– Sammitch
Nov 16 '18 at 19:06
Then this is a completely different problem with your input.
– Sammitch
Nov 16 '18 at 19:06
add a comment |
draft saved
draft discarded
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53343753%2fstrange-behaviour-in-php-hash-hmac%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
Please provide a MCVE of this problem. It shouldn't create a different hash just because the value is saved in a variable first. Maybe the
$signature_stringvariable or the$api_keyvariable is changing.– Progman
Nov 16 '18 at 18:57
i am pretty sure this can me reproduced using any string as api_key. I am 100% sure the data is the same (api_key is used both times). the 2 snippets are right after each other and api_key is never altered.
– Felix D.
Nov 16 '18 at 19:00
It can not be reproduced with just these code blocks. They will return the same hash, regardless if the message is written directly in the
hash_hmac()call or via a variable. Please provide a MCVE.– Progman
Nov 16 '18 at 19:03
1
WFM: 3v4l.org/okmLH
– Sammitch
Nov 16 '18 at 19:05