3 ms·
Is there something about HMAC, which can augment any hash function, that makes it insufficient for the task?
by kbolino 14y ago
Is there something about HMAC, which can augment any hash function, that makes it insufficient for the task?
- moonboots 14y agoA hash function immune to length extension attacks is more fool-proof than HMAC because there is no additional construct required. It's also faster because it requires no additional passes over data.
- tptacek 14y agoYes. HMAC is very slow. Also, length extension is a pernicious and scary little property to have lurking around your crypto designs; you want it gone.