Feature: #102761 - Introduce class to generate/validate HMAC hashes
See forge#102761
Description
A new class \TYPO3\
has been introduced to
enhance the security and flexibility in generating Hash-based Message
Authentication Codes (HMACs). This class combines the functionality of
General
and Extbase's Hash
, while
enforcing the use of an additional, mandatory secret for HMAC generation and
HMAC string validation.
Impact
Using the new class \TYPO3\
, it is now
possible to mitigate the risk of HMAC reuse in unauthorized scenarios for the
same input.