Timeline for Is there a standard way to use a nonce with HMAC?
Current License: CC BY-SA 3.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 30, 2014 at 12:29 | comment | added | otus | SHA-3 supports a simpler MAC construction. That's not really relevant to this question, though. | |
| Jun 30, 2014 at 12:27 | comment | added | kasperd | @otus There are enough similarities between Merkle–Damgård constructions and sponge constructions, that some proofs are likely to apply equally to both. And being similar also makes it simpler to analyse, what the differences between them does mean to security. I don't know if the well known HMAC construction is the preferred construction to use, if you want to build MAC out of SHA3, or if there exist other MAC constructions specifically designed for use with sponge hashes. | |
| Jun 30, 2014 at 12:22 | comment | added | kasperd | @otus Before SHA3, Merkle–Damgård hashes would be used for practically everything needing a cryptographic hash. And due to that, HMAC was designed under the assumption, that a Merkle–Damgård hash would be used. However other constructions had been analyzed and proven secure in a random oracle model, and there is a huge gap between the theoretical oracle model and the practical Merkle–Damgård construction. The sponge construction was invented to narrow the gap between theory and practice. | |
| Jun 30, 2014 at 12:15 | comment | added | otus | In practice it's Merkle–Damgård hashes (MD5, SHA-1/2) that get used in HMAC. | |
| Jun 30, 2014 at 12:14 | review | First posts | |||
| Jun 30, 2014 at 12:15 | |||||
| Jun 30, 2014 at 11:59 | history | answered | kasperd | CC BY-SA 3.0 |