From da95998740cb733c4a105ab68b98dda9e770bd10 Mon Sep 17 00:00:00 2001 From: Vidar Karlsen Date: Thu, 18 Sep 2014 11:33:31 +0200 Subject: [PATCH] Specified that the API key has to be base64decoded --- doc/ValidationProtocolV20.adoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/ValidationProtocolV20.adoc b/doc/ValidationProtocolV20.adoc index 9521f0f..3fc4d1c 100644 --- a/doc/ValidationProtocolV20.adoc +++ b/doc/ValidationProtocolV20.adoc @@ -25,7 +25,7 @@ signature do: * Alphabetically sort the set of key/value pairs by key order. * Construct a single line with each ordered key/value pair concatenated using '&', and each key and value contatenated with '='. Do not add any linebreaks. Do not add whitespace. For example: `a=2&b=1&c=3`. - * Apply the HMAC-SHA-1 algorithm on the line as an octet string using the API key as key. + * Apply the HMAC-SHA-1 algorithm on the line as an octet string using the API key as key (remember to base64decode the API key obtained from Yubico). * Base 64 encode the resulting value according to RFC 4648, for example, `t2ZMtKeValdA+H0jVpj3LIichn4=`. * Append the value under key 'h' to the message.