EVP_SIGNATURE-HMAC(7ossl) OpenSSL EVP_SIGNATURE-HMAC(7ossl)
NAME
EVP_SIGNATURE-HMAC, EVP_SIGNATURE-Siphash, EVP_SIGNATURE-Poly1305,
EVP_SIGNATURE-CMAC - The legacy EVP_PKEY MAC signature implementations
DESCRIPTION
The algorithms described here have legacy support for creating MACs using
EVP_DigestSignInit(3) and related functions. This is not the preferred
way of creating MACs. Instead you should use the newer EVP_MAC_init(3)
functions. This mechanism is provided for backwards compatibility with
older versions of OpenSSL.
The same signature parameters can be set using EVP_PKEY_CTX_set_params()
as can be set via EVP_MAC_CTX_set_params() for the underlying EVP_MAC.
See EVP_MAC-HMAC(7), EVP_MAC-Siphash(7), EVP_MAC-Poly1305(7) and
EVP_MAC-CMAC(7) for details.
See L<EVP_PKEY-HMAC(7)>, L<EVP_PKEY-Siphash(7)>, L<EVP_PKEY-Poly1305(7)> or
L<EVP_PKEY-CMAC(7)> for details about parameters that are supported during the
creation of an EVP_PKEY.
For HMAC and CMAC, the OpenSSL FIPS provider also makes the following
parameter available with EVP_PKEY_CTX_get_params(3):
"fips-indicator" (OSSL_SIGNATURE_PARAM_FIPS_APPROVED_INDICATOR) <integer>
Returns 1 if the operation is FIPS approved, or 0 otherwise. See
"FIPS indicators" in fips_module(7) for more information.
SEE ALSO
EVP_MAC_init(3), EVP_DigestSignInit(3), EVP_PKEY-HMAC(7),
EVP_PKEY-Siphash(7), EVP_PKEY-Poly1305(7), EVP_PKEY-CMAC(7),
EVP_MAC-HMAC(7), EVP_MAC-Siphash(7), EVP_MAC-Poly1305(7),
EVP_MAC-CMAC(7), provider-signature(7),
COPYRIGHT
Copyright 2020-2026 The OpenSSL Project Authors. All Rights Reserved.
Licensed under the Apache License 2.0 (the "License"). You may not use
this file except in compliance with the License. You can obtain a copy
in the file LICENSE in the source distribution or at
<https://www.openssl.org/source/license.html>.
3.6.5 2026-09-29 EVP_SIGNATURE-HMAC(7ossl)
openssl 3.6.5 - Generated Sat Oct 3 10:06:59 CDT 2026