Linked Questions

3
votes
1answer
2k views

What are the different use cases between an HMAC and digital signature? [duplicate]

I understand that both an HMAC and digital signature are used to check the integrity and authenticity of a message. Further, I understand that a digital signature is non-repudiatible. What I do not ...
0
votes
0answers
25 views

Keyed Hash Functions [duplicate]

What are keyed hash functions? Why are they needed? I have never used a hash function which specifies the key so not getting the significance. The key need not be secret. Why is it so?
9
votes
2answers
4k views

How is digital signature different from a message authentication code (MAC)?

I know the definitions of both but can't specifically tell how they are different and if one is better than the other. Please help.
8
votes
1answer
4k views

what are the advatanges and disavantages of the digital signature algorithms for JWT?

I am using a Java JWT library jose4j. There is a list of digital signatures algorithms which can be used. HMAC using SHA-2 RSASSA-PKCS1-V1_5 Digital Signatures with with SHA-2 Elliptic Curve Digital ...
5
votes
1answer
4k views

HMAC vs RSA speed

To my understanding one of the main advantages HMAC has over RSA is that HMAC is faster to compute. My question is: How much faster? Say you are signing a SHA-1 hash function 1000 times a day. How ...
1
vote
2answers
2k views

Checking a file for integrity and authentication

A checksum is a small-sized datum derived from a block of digital data for the purpose of detecting errors which may have been introduced during its transmission or storage. It is usually applied to ...
1
vote
2answers
917 views

Integrity check of a binary firmware file with hash function

I need to provide a mechanism that it is possible to verify the integrity of a firmware image flashed on an embedded system. The procedure should be, that if someone has doubt on the firmware’s ...
1
vote
2answers
285 views

What is a simple information authentication protocol for constrained devices?

Background: I have an application where devices will poll information from some source on the network. These devices are very basic and have modest processing and memory capabilities. Hashing (and ...
2
votes
1answer
117 views

MAC providing sender authentication (follow up question)

I was looking at the responses posted on the following question: How is digital signature different from a message authentication code (MAC)? I read the following comment to the first answer: So ...
1
vote
1answer
37 views

What's the use of SHA on Non Digital Signature applications?

What's the use of SHA on Non Digital Signature applications? Why is SHA1 not a risk for Non Digital Signature applications? What's the difference between Non Digital Signature applications vs. Digital ...