HMAC vs. generic-secret key type amendment

[Peter Gutmann <pgut001@cs.auckland.ac.nz>]

Apparently this never made it to the list during yesterday's conference call,
this is a re-send:

-- Snip --

The document I mentioned, or at least a late draft, is still on the RSA
server:

ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-11/v2-20/pkcs-11v2-20a4d2.pdf

This isn't quite the final version (which vanished somewhere at RSA), but the
"Background" section should give enough of the rationale for why the change
was needed.  As I mentioned on the call, at the time the users that were
affected by this were using HMAC so this is a point solution rather than an
attempt to redefine MAC usage in general, which would presumably have required
much bigger changes.

Peter.