How to retrive HMAС-key that makes HMAC from secrets (when Audit Device is enabled)

I use /sys/audit-hash api but it takes too long. I have a dictionary of 2 billion passwords, I need to turn them HMAC-codes. I need to do this quickly. How to get salt - where is it stored?

It is not available via any public API.

The only way to get it is to enable the raw_storage_endpoint config setting and fetch it from the sys/raw/ API.

It can be found at audit/<some UUID>/salt within sys/raw/.

1 Like