You can also determine the keyed hash function key if you collect enough plaintexts, which would let you forge authentication tags https://csrc.nist.gov/csrc/m

You can also determine the keyed hash function key if you collect enough plaintexts, which would let you forge authentication tags https://csrc.nist.gov/csrc/media/projects/block-cipher-techniques/documents/bcm/comments/800-38-series-drafts/gcm/joux_comments.pdf https://csrc.nist.gov/csrc/media/projects/block-cipher-techn...