BQ40Z80: SHA1/HMAC Digest calculation

I use these calculators for example 

https://cryptii.com/pipes/hash-function

https://www.liavaag.org/English/SHA-Generator/HMAC/

can we generate the same digest in bq with these calculators?

Hello Canberk,

you should be able to find all the information you need in the TRM, chapter 15.

Can you explain your method of calculating the key with an example and what bqStudio vs your calculations show?

Sincerely,

Wyatt Keller

Hello Wyatt,

Of course I read the trm and I can't get the same result from bq studio that's why I ask in forum 

This is bq studio key, challange and digest 

first calculation for HMAC1 as write on the trm

second calculation for HMAC2, I change the new messeage to HMAC1 as write on the trm  and I get different result from bq studio

this is the first way I mean in the question ""1) big endian key big endian message(2 round)""

""""""1) Big endian key, big endian message(challange) (2 round)(first digest is 2nd message as write on the "how to Implement SHA-1/HMAC Authentication for bq26100 and trm of bq40z80 ")

2) Little endian key, little endian message(challange) (2 round)

3)Big endian key,little endian message(challange) (2 round)

4) Little endian key, big endian message(challange) (2 round)""""""

and I use this calculation for the other way(2) 3) 4)) too but I can't get the same result from bq studio too

Can you explain step by step the calculation of bq studio or do you have have open ssl calculator for calculate the same result like bq studio or which step is wrong in my calculation

Thanks for your reply.

Sincerely,

Canberk TUZCU

Hello Canberk,

The app note you're referencing should give you the instruction for how to calculate the digest. Let me contact someone in our team more familiar with the authentication to check the methods used by bqStudio.

Sincerely,

Wyatt Keller

Hello Wyatt,

Firstly thanks for your reply,

I eagerly waiting the teams reply.

Sincerely,

Canberk TUZCU

Hello Wyatt,

if the java libraries is open ssl can you share it?

Online HMAC hash generator: HMAC-MD5, HMAC-SHA — Cryptii

HMAC Generator — Online Hash Encryption (liavaag.org)

I use this online calculators but I can't find same result from bq studio can we calculate the same result with online calculators?

Sincerely,

Canberk TUZCU

Hello Wyatt,

I think the problem is not FIPS xx standards because I take the value from bq studio ı meant first chllange and key is coming from bq studio and hmac1 is calculated from them and hmac2 is calculated from key and hmac1 all of them(without hmac1 and hmac2) is bq studio 40z80 sha1 authentication section

thats mean we have difference between calculation, did you have step for the calculations?  

Hello Canberk,

Can you share how you are doing the padding and creating the full message to hash? It looks like you are not using any padding in the examples you gave.

You can use this reference: https://e2e.ti.com/support/power-management-group/power-management/f/power-management-forum/785723/bq30z554-r1-sha-1-hmac-not-working

It may help with some of the questions. I will continue to look if we have another guide, but I believe the ones shared should have all the information needed.

Sincerely,

Wyatt Keller