
Currently, the input to HMAC function is the entire stored credential in the format '<salt>$<hash>` but it should rather be only the hashed key/password. With this change, validate_creds() method is invoked and only the hash of the password is used in HMAC computation. Change-Id: I1a9bbcac6f49c23f3256572f148e55249a59f7ed Signed-off-by: Prashanth Pai <ppai@redhat.com>