Module mac 

Constants

MAC_TAG_LEN

SESSION_NONCE_LEN

Functions

compute_tag

HMAC-SHA256 over header || payload.

derive_session_key

Derive the per-connection MAC key. Inputs are known to both the kernel and the plugin: the shared jwt_secret, the per-registration nonce from the ack, and the registered plugin_id.

verify_tag

Constant-time verification of a tag over header || payload.