I think the point was that if some dumb protocol were *misusing* HMAC (and I'm n... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		jessaustin on May 13, 2015 \| parent \| context \| favorite \| on: The Little MAC Attack I think the point was that if some dumb protocol were misusing HMAC (and I'm not good enough at thinking about protocols to imagine how it might do so), it could be vulnerable to collisions generated this way.

tptacek on May 13, 2015 [–]

The point of the parent commenter is that a misuse of HMAC that gives attackers knowledge of the key admits much simpler attacks than this.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact