Feature: #102761 - Introduce class to generate/validate HMAC hashes¶

See forge#102761

Description¶

A new class \TYPO3\CMS\Core\Crypto\HashService has been introduced to enhance the security and flexibility in generating Hash-based Message Authentication Codes (HMACs). This class combines the functionality of GeneralUtility::hmac() and Extbase's HashService, while enforcing the use of an additional, mandatory secret for HMAC generation and HMAC string validation.

Impact¶

Using the new class \TYPO3\CMS\Core\Crypto\HashService, it is now possible to mitigate the risk of HMAC reuse in unauthorized scenarios for the same input.