Integrity checking

The PSKC format allows for message authentication and integrity checking for some of the values stored within the PSKC file.

class pskc.mac.MAC

algorithm

The name of the MAC algorithm to use (currently only HMAC_SHA1 is supported).

key

For HMAC checking, this contains the binary value of the MAC key. The MAC key is generated specifically for each PSKC file and encrypted with the PSKC encryption key, so the PSKC file should be decrypted first (see PSKC encryption).

Once the PSKC encryption key has been set up key values can be checked using the pskc.key.Key.check() method:

pskc = PSKC('somefile.pskcxml')
pskc.encryption.derive_key('qwerty')
all(key.check() for key in pskc.keys)