Encryption Coldfusion HMAC-SHA1

Question

Here is an example of HMAC-SHA1 that works in javascript

http://jssha.sourceforge.net/

Text to Encrypt

vibaHBXwUXFqVSg- + kTrqYJZEJkbVeqLc = bo.

Key

vibaHBXwUXFqVSg- + kTrqYJZEJkbVeqLc = bo.LlX

Exit

9e734661c9e8b6dc9b6b4b3def9769c00e8843b8

Problem

However, I cannot duplicate the output in Coldfusion. I use the function from a previous question by Stackoverflow.com

<cffunction name="hmacEncrypt" returntype="binary" access="public" output="false"> <cfargument name="signKey" type="string" required="true" /> <cfargument name="signMessage" type="string" required="true" /> <cfset var jMsg = JavaCast("string",arguments.signMessage).getBytes("iso-8859-1") /> <cfset var jKey = JavaCast("string",arguments.signKey).getBytes("iso-8859-1") /> <cfset var key = createObject("java","javax.crypto.spec.SecretKeySpec") /> <cfset var mac = createObject("java","javax.crypto.Mac") /> <cfset key = key.init(jKey,"HmacSHA1") /> <cfset mac = mac.getInstance(key.getAlgorithm()) /> <cfset mac.init(key) /> <cfset mac.update(jMsg) /> <cfreturn mac.doFinal() /> </cffunction> <cfset result = hmacEncrypt("vibaHBXwUXFqVSg-+kTrqYJZEJkbVeqLc=bo.LlX", "vibaHBXwUXFqVSg-+kTrqYJZEJkbVeqLc=bo.LlXGET12505351831husu9039http://api.tineye.com/rest/search/image_url=http%3a%2f%2ftineye.com%2fimages%2ftineye_logo_big.png&limit=30&offset=10")> <cfset x1 = toString(tobase64(result))> 

Returns

nnNGYcnottyba0s975dpwA6IQ7g =

Any help was appreciated.

Answer 1

 <cfset x1 = toString(tobase64(result))> 

Another function returns hex, not base64. Also, it seems to me that this works fine:

  <cfset x1 = binaryEncode(result, "hex")> 

Answer 2

The key is in the expected output line: it contains only numbers and lowercase letters. If you look closer, all letters are in the range af. Therefore, it is very likely that this is a hexadecimal string.

The last line of your sample code encodes the result as base64, not hexadecimal. You can encode the result as hexadecimal by changing the last line to this:

 <cfset x1 = binaryEncode(result,"hex")> 

I ran the modified code and got

 9E734661C9E8B6DC9B6B4B3DEF9769C00E8843B8 

which is a lowercase version of your expected string.