2006-05-08から1日間の記事一覧

MAC_k(x)=MD5(k,x) としたときに不味い理由.

Kazuho@Cybouzu Labs: Hash \neq MAC Consider the "prepend-only" construction: MAC_k(x) = F(k, x) (i.e., the key k is prepended to the data x and the hash function - with the fixed IV - computed on the concatenated information). Because of t…