From 87de8e82a157ecbcc596b0226b8a6fc0e81a8b1b Mon Sep 17 00:00:00 2001
From: Divy Srivastava <dj.srivastava23@gmail.com>
Date: Thu, 5 Aug 2021 01:19:27 +0530
Subject: feat(extensions/crypto): implement verify() for HMAC (#11387)

---
 extensions/crypto/lib.rs | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'extensions/crypto/lib.rs')

diff --git a/extensions/crypto/lib.rs b/extensions/crypto/lib.rs
index 09f237fa6..d1908120d 100644
--- a/extensions/crypto/lib.rs
+++ b/extensions/crypto/lib.rs
@@ -505,6 +505,11 @@ pub async fn op_crypto_verify_key(
         .verify(padding, &hashed, &*args.signature)
         .is_ok()
     }
+    Algorithm::Hmac => {
+      let hash: HmacAlgorithm = args.hash.ok_or_else(not_supported)?.into();
+      let key = HmacKey::new(hash, &*args.key.data);
+      ring::hmac::verify(&key, data, &*args.signature).is_ok()
+    }
     _ => return Err(type_error("Unsupported algorithm".to_string())),
   };
 
-- 
cgit v1.2.3