XPost: sci.crypt   
   From: chris.m.thomasson.1@gmail.com   
      
   On 2/15/2026 2:00 AM, Stefan Claas wrote:   
   > Chris M. Thomasson wrote:   
   >> On 2/14/2026 1:46 PM, Stefan Claas wrote:   
   >>> Chris M. Thomasson wrote:   
   >>>> On 2/14/2026 6:48 AM, Stefan Claas wrote:   
   >>>>> Chris M. Thomasson wrote:   
   >>>>>> On 2/12/2026 9:40 PM, Chris M. Thomasson wrote:   
   >>>>>>> Well, I made some alterations to my old C version of my HMAC cipher. It   
   >>>>>>> uses some non-portable API's in order to try to get a TRNG. It prints   
   >>>>>>> out its usage, just run the program with no arguments, look in ct_help.   
   >>>>>>>   
   >>>>>>> Well, can anybody else get it to compile _and_ run on their end? Thanks   
   >>>>>>> everybody!   
   >>>>>>>   
   >>>>>>> The secret key is hardcoded to Password and SHA2-512:   
   >>>>>> [...]   
   >>>>>>   
   >>>>>> I put it up on github:   
   >>>>>>   
   >>>>>> https://github.com/ChrisMThomasson/ct_HMAC_Cipher_Experim   
   nt/blob/main/ct_hmac_sha2_512.c   
   >>>>>>   
   >>>>>   
   >>>>> Why I do not like your code snippets:   
   >>>>>   
   >>>>> $ gcc hmac.c -o hmac   
   >>>>> hmac.c:29:10: fatal error: hmac_sha2.h: No such file or directory   
   >>>>>       29 | #include "hmac_sha2.h"   
   >>>>>          |          ^~~~~~~~~~~~~   
   >>>>> compilation terminated.   
   >>>>   
   >>>> Well, it uses the following lib:   
   >>>>   
   >>>> https://github.com/ogay/hmac   
   >>>>   
   >>>> So, go get it. Actually, its pretty nice. That is the only dependency.   
   >>>> After that, it should work fine. I cannot just copy those files from   
   >>>> ogay into my repository, right? :^)   
   >>>   
   >>> Oh well, at least you should have mentioned in your OP the dependencies!   
   >>>   
   >>>>> You should definetly learn Go or Rust...!!! BTW. speaking of TRNG,   
   >>>>> your's is not a TRNG, use instead on your Windows box your TPM 2.0   
   >>>>> hardware TRNG module, like I did, for example with pwgen:   
   >>>>   
   >>>> Well, if somebody has access to a "real" TRNG device, they can adapt my   
   >>>> code to use its API.   
   >>>   
   >>> So, you don't have one in your PC? Then you should also not speak in the   
   >>> future about TRNG in your code, when it is not!   
   >>>   
   >>>>> https://github.com/Ch1ffr3punk/pwgen   
   >>>>>   
   >>>>> Or if your computer is too old for TPM 2.0 usage try to use Quantum   
   >>>>> Random bytes:   
   >>>>>   
   >>>>> https://github.com/Ch1ffr3punk/qrng   
   >>>>> https://github.com/Ch1ffr3punk/pnr   
   >>>>>   
   >>>>> HTH!   
   >>>>   
   >>>> That is a TRNG? I thought I needed a special device for that?   
   >>>   
   >>> Yes, it uses a real TRNG in my PC, i.e. the TMP 2.0 hardware module.   
   >>>   
   >>   
   >> I put DrMoron up online. Here is a message encrypted using the default   
   >> key. Click it, and you should see the message:   
   >>   
   >> https://fractallife247.com/test/hmac_cipher/drmoron/?ct_hmac_cipher=   
   0decd464be7496f9534ef9fabee04f8d283ee784811a8a9bff4193329f2bcaa8   
   9fb8288acc5c096618dcaf71c19304cce3f02d7a9e60975fdb9b468fbf3093a2   
   c266846ff228c4ef1ca0fc8b6e81b7654857a35440a75a4d44711efb61a18fb2   
   26b4f373d5cc86ee5809dcadf96f42f5ed62e27e1d6bb2fe3c8574047fcc   
   55d92066a9faa0958edaa93c371939a50c08b1f0885d42e028d8190f10609   
   >   
   > I will try out your online cipher, once your website is secured with:   
   >   
   > https://github.com/Ch1ffr3punk/mfv   
      
   Fwiw, notice the clear warning on my site:   
   ________________   
     EXPERIMENTAL - NOT SECURE ENCRYPTION ⚠️   
   DO NOT use for real secrets! This cipher is experimental, unreviewed,   
   and for educational purposes only.   
   ________________   
      
      
   > because best security pratices should be used when someone is offering   
   > online encryption, so that the site and owner can be trusted.   
      
   Well, one can download the files for the site and run it offline for   
   sure. No server, no internet connection needed. Fair enough? Btw, has   
   _your_ work been properly peer reviewed?   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)