See [Message Authentication, Revisited][1]. This paper presents MACs with different properties, and in order to achieve these properties randomization is used. Since the MACs are probabilistic, the verification cannot be canonical. [1]: https://eprint.iacr.org/2012/059