17 ms·
As to the specific hmac-sha1 construction -- hmac are not simply sha sums. If the hmac key is not shared, the hmac does not solely rely on the collision resista
by stock_toaster 11y ago
As to the specific hmac-sha1 construction -- hmac are not simply sha sums. If the hmac key is not shared, the hmac does not solely rely on the collision resistance of the prf. see: https://cseweb.ucsd.edu/~mihir/papers/hmac-new.html https://cseweb.ucsd.edu/~mihir/papers/hmac-new.html
- iamsohungry 11y agoInteresting. The only proof of HMAC efficacy I had seen was one by contradiction, where a false HMAC that validates would imply a collision on the underlying hash. (I'm saying this from memory, which is widely known to be unreliable).