XPost: sci.crypt   
   From: noreply@oc2mx.net   
      
   Chris M. Thomasson wrote:   
   > On 2/14/2026 1:46 PM, Stefan Claas wrote:   
   > > Chris M. Thomasson wrote:   
   > > > On 2/14/2026 6:48 AM, Stefan Claas wrote:   
   > > > > Chris M. Thomasson wrote:   
   > > > > > On 2/12/2026 9:40 PM, Chris M. Thomasson wrote:   
   > > > > > > Well, I made some alterations to my old C version of my HMAC   
   cipher. It   
   > > > > > > uses some non-portable API's in order to try to get a TRNG. It   
   prints   
   > > > > > > out its usage, just run the program with no arguments, look in   
   ct_help.   
   > > > > > >   
   > > > > > > Well, can anybody else get it to compile _and_ run on their end?   
   Thanks   
   > > > > > > everybody!   
   > > > > > >   
   > > > > > > The secret key is hardcoded to Password and SHA2-512:   
   > > > > > [...]   
   > > > > >   
   > > > > > I put it up on github:   
   > > > > >   
   > > > > > https://github.com/ChrisMThomasson/ct_HMAC_Cipher_Expe   
   iment/blob/main/ct_hmac_sha2_512.c   
   > > > > >   
   > > > >   
   > > > > Why I do not like your code snippets:   
   > > > >   
   > > > > $ gcc hmac.c -o hmac   
   > > > > hmac.c:29:10: fatal error: hmac_sha2.h: No such file or directory   
   > > > >      29 | #include "hmac_sha2.h"   
   > > > >         |          ^~~~~~~~~~~~~   
   > > > > compilation terminated.   
   > > >   
   > > > Well, it uses the following lib:   
   > > >   
   > > > https://github.com/ogay/hmac   
   > > >   
   > > > So, go get it. Actually, its pretty nice. That is the only dependency.   
   > > > After that, it should work fine. I cannot just copy those files from   
   > > > ogay into my repository, right? :^)   
   > >   
   > > Oh well, at least you should have mentioned in your OP the dependencies!   
   > >   
   > > > > You should definetly learn Go or Rust...!!! BTW. speaking of TRNG,   
   > > > > your's is not a TRNG, use instead on your Windows box your TPM 2.0   
   > > > > hardware TRNG module, like I did, for example with pwgen:   
   > > >   
   > > > Well, if somebody has access to a "real" TRNG device, they can adapt my   
   > > > code to use its API.   
   > >   
   > > So, you don't have one in your PC? Then you should also not speak in the   
   > > future about TRNG in your code, when it is not!   
   > >   
   > > > > https://github.com/Ch1ffr3punk/pwgen   
   > > > >   
   > > > > Or if your computer is too old for TPM 2.0 usage try to use Quantum   
   > > > > Random bytes:   
   > > > >   
   > > > > https://github.com/Ch1ffr3punk/qrng   
   > > > > https://github.com/Ch1ffr3punk/pnr   
   > > > >   
   > > > > HTH!   
   > > >   
   > > > That is a TRNG? I thought I needed a special device for that?   
   > >   
   > > Yes, it uses a real TRNG in my PC, i.e. the TMP 2.0 hardware module.   
   > >   
   >   
   > I put DrMoron up online. Here is a message encrypted using the default   
   > key. Click it, and you should see the message:   
   >   
   > https://fractallife247.com/test/hmac_cipher/drmoron/?ct_hmac_cipher=   
   0decd464be7496f9534ef9fabee04f8d283ee784811a8a9bff4193329f2bcaa8   
   9fb8288acc5c096618dcaf71c19304cce3f02d7a9e60975fdb9b468fbf3093a2   
   c266846ff228c4ef1ca0fc8b6e81b7654857a35440a75a4d44711efb61a18fb2   
   26b4f373d5cc86ee5809dcadf96f42f5ed62e27e1d6bb2fe3c8574047fcc   
   55d92066a9faa0958edaa93c371939a50c08b1f0885d42e028d8190f10609   
      
   I will try out your online cipher, once your website is secured with:   
      
   https://github.com/Ch1ffr3punk/mfv   
      
   because best security pratices should be used when someone is offering   
   online encryption, so that the site and owner can be trusted.   
      
   --   
   https://oc2mx.net   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)