EVP_MAC-BLAKE2(7SSL)

πŸ’– EVP_MAC-BLAKE2(7SSL) β€” the BLAKE2 glow-up for OpenSSL πŸ’–

okay so bestie, listen. This page is all about EVP_MAC-BLAKE2, EVP_MAC-BLAKE2BMAC and EVP_MAC-BLAKE2SMAC β€” aka The BLAKE2 EVP_MAC implementations. They live in OpenSSL and they're here to make your MAC game immaculate. πŸŽ€


✨ DESCRIPTION ✨

Support for computing BLAKE2 MACs through the EVP_MAC API. That's the whole vibe. πŸ¦‹

πŸͺͺ Identity

These implementations get identified with one of these names and properties, and you use them with EVP_MAC_fetch():

"BLAKE2BMAC", "provider=default"
"BLAKE2SMAC", "provider=default"

periodt, those are the two main characters. πŸ‘‘

πŸŽ›οΈ Supported parameters

The general description of these parameters can be found in "PARAMETERS" in EVP_MAC(3) β€” go peek at that if you want the full lore.

All these parameters (except for "block-size") can be set with EVP_MAC_CTX_set_params(). And the way that the "size" parameter can be retrieved with EVP_MAC_CTX_get_params(), or with EVP_MAC_CTX_get_mac_size() β€” obsessed. The length of the "size" parameter should not exceed that of a size_t. Likewise (we love a likewise), the "block-size" parameter can be retrieved with EVP_MAC_CTX_get_params(), or with EVP_MAC_CTX_get_block_size().

  • "key" (OSSL_MAC_PARAM_KEY) <octet string> β€” Sets the MAC key πŸ”‘. It may be at most 64 bytes for BLAKE2BMAC or 32 for BLAKE2SMAC, and at least 1 byte in both cases. Setting this parameter is identical to passing a key to EVP_MAC_init(3). no cap.
  • "custom" (OSSL_MAC_PARAM_CUSTOM) <octet string> β€” Sets the customization/personalization string 🌸. It's an optional value of at most 16 bytes for BLAKE2BMAC or 8 for BLAKE2SMAC, and is empty by default. it's giving "make it yours".
  • "salt" (OSSL_MAC_PARAM_SALT) <octet string> β€” Sets the salt πŸ§‚. It is an optional value of at most 16 bytes for BLAKE2BMAC or 8 for BLAKE2SMAC, and is empty by default.
  • "size" (OSSL_MAC_PARAM_SIZE) <unsigned integer> β€” Sets the MAC size πŸ“. It can be any number between 1 and 32 for EVP_MAC_BLAKE2S, or between 1 and 64 for EVP_MAC_BLAKE2B. It is 32 and 64 respectively by default.
  • "block-size" (OSSL_MAC_PARAM_BLOCK_SIZE) <unsigned integer> β€” Gets the MAC block size 🧱. It is 64 for EVP_MAC_BLAKE2S and 128 for EVP_MAC_BLAKE2B.

πŸ‘€ SEE ALSO πŸ‘€


πŸ“œ HISTORY πŸ“œ

The macros and functions described here were added to OpenSSL 3.0. so iconic, so historic. πŸ’…


Copyright 2018-2021 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.


fr fr that's the whole page, bestie β€” go forth and MAC responsibly πŸ’œ

mwah πŸ’‹ this was OpenSSL 4.0.3, dated 2026-09-29 β€” catch you on the next manpage, ily 🫢✨

πŸ“¦ where this page comes from