RE: Bug 24806 - Should the spec mandate a minimum key length for HMAC?

I don't think that I care one way or the other.  As an arbitrary lower bound
I suppose it is fine.  I would also be just as happy with key length being a
minimum of 1/2 of the hash output length.

 

Jim

 

 

From: Mark Watson [mailto:watsonm@netflix.com] 
Sent: Friday, February 28, 2014 8:29 AM
To: public-webcrypto@w3.org
Subject: Bug 24806 - Should the spec mandate a minimum key length for HMAC?

 

https://www.w3.org/Bugs/Public/show_bug.cgi?id=24806

 

My proposal is to dis-allow zero length keys for HMAC. Comments ?

 

...Mark