Interesting. The only proof of HMAC efficacy I had seen was one by contradiction, where a false HMAC that validates would imply a collision on the underlying ha

Interesting. The only proof of HMAC efficacy I had seen was one by contradiction, where a false HMAC that validates would imply a collision on the underlying hash. (I'm saying this from memory, which is widely known to be unreliable).