MAC Operations

The NAE Server is quite useful for protecting passwords. If you store passwords in a database in clear text, and a malicious user compromises that database, then all your user passwords are jeopardized. However, if you store keyed hashes of the passwords in a database, a malicious user who compromises your database cannot obtain anything useful.

How it works

1. When the CADP for Java finds a password for a user named Irwin, it sends the password to the Key Manager, which computes a keyed hash of the password.

2. The keyed hash is returned to the CADP for Java.

3. The hashed password is stored in a database or other server.

4. The next time Irwin logs in, he provides his password as part of the request.

5. The CADP for Java is sent the password from Irwin and the hashed password stored in the database.

6. The Key Manager once again applies the keyed hash function to the password submitted from Irwin and compares that value to the hash value stored in the database. The NAE Server returns:

   • 1: if the two hash values match

   • 0: if the two hash values do not match

In this article you will learn how to :

• Generate MAC

• Verify MAC

• Bulk Operation in HMAC