Questions tagged [kmac]

KMAC or Keccak Message Authentication Code is a proposed MAC based on the SHA-3 hash.

Filter by
Sorted by
Tagged with
0 votes
0 answers

What is the difference between HMAC-SHA3-512 and KMAC? [duplicate]

Reading through the wikipedia entry for HMAC I see that SHA-3 can be used with the HMAC algorithm to give HMAC-SHA3-512. I also know that there is KMAC, which from ...
dade's user avatar
  • 133
4 votes
1 answer

Is KMAC just SHA-3-256(KEY || message)

According to keccak strengths you have: Unlike SHA-1 and SHA-2, Keccak does not have the length-extension weakness, hence does not need the HMAC nested construction. Instead, MAC computation can be ...
Finlay Weber's user avatar
2 votes
1 answer

Can you use a dynamic key and data size for KMAC?

I've asked before if some kind of canonical encoding should be used on the input parameters of SHA-3 before it could be used as replacement for HMAC. However, if I read the current NIST specifications ...
Maarten Bodewes's user avatar
  • 92.6k
1 vote
1 answer

Recommended Shake256 digest size for KMAC based HKDF

On the wiki page for HKDF, in the Python Implementation, there is a hash_length variable for the ...
SamG101's user avatar
  • 613
1 vote
0 answers

Parallel MAC vs doubled rounds for SipHash, KMAC and others

SipHash 4-8 is documented by the authors as being about half the speed of SipHash 2-4 and is obviously the more conservative option. I was wondering from a security perspective how this would compare ...
MotiNK's user avatar
  • 324
2 votes
0 answers

Using NIST constructions based on Keccak like cSHAKE128 for other sponges

NIST defines a lot of interesting applications of sponges in FIPS 202 and NIST SP 800-185 like the XOF cSHAKE128 or the MAC scheme KMAC. All this schemes come with a security guarantee and are ...
mat's user avatar
  • 2,518
12 votes
2 answers

Should I use HMAC or KMAC for SHA3?

I am planning to implement a MAC function for the SHA3. I read that its latest variant is KMAC. I am confused by the comments in the website. Its says... Unlike SHA-1 and ...
ajith's user avatar
  • 121
5 votes
1 answer

Equivalent security of KMAC and different HMAC instances?

In the August 2016 draft of SP 800-185, SHA-3 Derived Functions (pdf) there is a table for equivalent security settings for KMAC, the MAC derived from SHA-3, and some previous MACs (Table 1 on pages ...
otus's user avatar
  • 32.1k