the hashes i get are different though.

Reply to this note

Please Login to reply.

Discussion

yes because you are feeding a hex encoded version to hmac

but it does not improve security

ok that's what I thought. so if there, hypothetically, was an implementation doing that, it probably was by mistake then?