Skip to main content
2 of 2
edited tags
Paŭlo Ebermann
  • 22.8k
  • 7
  • 81
  • 118

Why does a broken hash function undermine an HMAC?

For instance, what makes MD4 a bad choice for an HMAC? In this case I am asking about MD4 because its less than ideal. I know that a preimage attack can be used to undermine the system, but why? What is the attacker calculating?

Rook
  • 1.5k
  • 1
  • 13
  • 22