4 ms·
If Keccak isn't vulnerable to a length extension attack, is using it to hash a secret key concatenated with a message a good MAC algorithm? If not, why not?
by andreyf 14y ago
If Keccak isn't vulnerable to a length extension attack, is using it to hash a secret key concatenated with a message a good MAC algorithm? If not, why not?
- pjscott 14y agoAccording to the Keccak home page, it can be used for "keyed or randomized modes simply by prepending a key or salt to the input message." http://keccak.noekeon.org/ http://keccak.noekeon.org/