# Why don't we use H(m||k) as a MAC? [duplicate]

HMAC seems a bit complicated. Why can't we use $H(m||k)$ as a MAC? Unlike $H(k||m)$, length extension attacks won't work.

Is there some other obvious attack?

• – mikeazo Mar 4 '14 at 17:31