See Message Authentication, Revisited. This paper presents MACs with different properties, and in order to achieve these properties randomization is used. Since the MACs are probabilistic, the verification cannot be canonical.
Yehuda Lindell
- 28.2k
- 1
- 68
- 86