in sdk1/src/main/java/com/amazonaws/services/dynamodbv2/datamodeling/encryption/DynamoDBSigner.java [77:89]
private DynamoDBSigner(String signingAlgorithm, SecureRandom rnd) {
if (rnd == null) {
rnd = Utils.getRng();
}
this.rnd = rnd;
this.signingAlgorithm = signingAlgorithm;
// Shorter than the output of SHA256 to avoid weak keys.
// http://cs.nyu.edu/~dodis/ps/h-of-h.pdf
// http://link.springer.com/chapter/10.1007%2F978-3-642-32009-5_21
byte[] tmpKey = new byte[31];
rnd.nextBytes(tmpKey);
hmacComparisonKey = new SecretKeySpec(tmpKey, "HmacSHA256");
}