How to transform JavaScript HMAC code to CryptoSwift implementation?

Question

I want to transform this JavaScript HMAC code to Swift using CryptoSwift library.

var crypto = require("crypto");
var currentDate = Moment.utc().format("YYYYMMDDHH");
var hmac = crypto.createHmac("sha256", "secretTokenKey123");
hmac.update(currentDate);
var code = hmac.digest("hex").toUpperCase();

What is the best way to do that?

This is what I tried, but did not return the correct code:

    let formatter = DateFormatter()
    formatter.dateFormat = "yyyyMMddHH"
    let dateString = formatter.string(from: Date())
    let baseString = secretToken + dateString
    print(baseString.sha256().uppercased())

I also tried this, but it returns the same wrong code

    var digest = SHA2(variant: .sha256)
    var bytes: Array<UInt8>?
    do {
        _ = try digest.update(withBytes: secretToken.bytes)
        _ = try digest.update(withBytes: dateString.bytes)
        bytes = try digest.finish()
    } catch {}
    if let result = bytes?.toHexString().uppercased() {
        print(result)
    }

I also tried to use HMCA from CryptoSwift directly. But I do not know what message I need to authenticate:

HMAC(key: secretToken.bytes, variant: .sha256).authenticate(???)

I tried to use try HMAC(key: key, variant: .sha256).authenticate(bytes) from CryptoSwift. However it does not match how it is used in my JS example. I do not have something to put in as bytes. — funkenstrahlen
– funkenstrahlen, Commented Dec 23, 2017 at 11:16
@Andreas I updated my question to show what I already tried without the correct result. — funkenstrahlen
– funkenstrahlen, Commented Dec 23, 2017 at 11:40
It is best to avoid using CryptoSwift, amoung other things it is 500 to 1000 times slower than Common Crypto based implementations. Apple's Common Crypto is FIPS certified and as such has been well vetted, using CryptoSwift is taking a chance on correctness and security. — zaph
– zaph, Commented Dec 23, 2017 at 13:01
@zaph Can you tell me how to implement this using Apple's Common Crypto? — funkenstrahlen
– funkenstrahlen, Commented Dec 28, 2017 at 10:58

funkenstrahlen · Accepted Answer · 2017-12-23 11:57:19Z

2

I just discovered the solution myself:

HMAC(key: secretToken.bytes, variant: .sha256).authenticate(dateString.bytes).toHexString().uppercased()

answered Dec 23, 2017 at 11:57

funkenstrahlen

3,1222 gold badges31 silver badges43 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

zaph · Accepted Answer · 2017-12-28 13:17:16Z

HAMC SHA256 in Common Crypto

func hmacSHA256(message:Data, key:Data) -> Data {
    var macData = Data(count: Int(CC_SHA256_DIGEST_LENGTH))

    macData.withUnsafeMutableBytes {macBytes in
        message.withUnsafeBytes {messageBytes in
            key.withUnsafeBytes {keyBytes in
                CCHmac(CCHmacAlgorithm(kCCHmacAlgSHA256),
                       keyBytes,     key.count,
                       messageBytes, message.count,
                       macBytes)
            }
        }
    }
    return macData
}

let clearData = "clearData0123456".data(using:.utf8)!
let keyData   = "keyData8901234562".data(using:.utf8)!
let hmacData  = hmacSHA256(message:clearData, key:keyData)
print("hmacData: \(String(describing: hmacData as NSData))")

hmacData: fcc487ce7dc1115a69a37dc3710610a87ad2fc9c85e2e0a52f0e7ee1dc9407c1

Note:
Include #import <CommonCrypto/CommonCrypto.h> in a bridging header.
Add Security.framework to the project

Collectives™ on Stack Overflow

How to transform JavaScript HMAC code to CryptoSwift implementation?

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related