1
$\begingroup$

HMAC seems a bit complicated. Why can't we use $H(m||k)$ as a MAC? Unlike $H(k||m)$, length extension attacks won't work.

Is there some other obvious attack?

$\endgroup$
1

Browse other questions tagged or ask your own question.