0
$\begingroup$

Is there a way to modify the contents of data being sent between two parties in such a way that the MAC verification algorithm will not detect the tampering?

$\endgroup$

1 Answer 1

1
$\begingroup$

Not if

  • a secure MAC is chosen (e.g., HMAC-SHA256, CBC-MAC)
  • the MAC is used correctly (e.g., not reusing a CBC-MAC key for encryption), and
  • the secret MAC key is unknown by the attacker

That's literally the entire point of a MAC.

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.