Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 25354

Cipher Block Chaining MAC (CBC-MAC) is a method of building a message authentication code from a block-cipher.

3 votes

Why is CBC-MAC with length appended not secure?

I'll give you a hint, and you can work out the details yourself. Take any $m_1,m_2,m_3$ of length $n$ (where $n$ is the block length), with $m_1\neq m_2$. Query the oracle with $m_1$, then query the …
Yehuda Lindell's user avatar
3 votes
Accepted

Would a simplified CBC-MAC be safe?

I'll assume that you a prefix-free encoding (or fixed-length messages) to solve that problem of CBC-MAC. It's actually very possible that this would be secure since the proof of CBC-MAC pretty much wo …
Yehuda Lindell's user avatar
3 votes
Accepted

Security proof for CBC as a prefix-free PRF

The answer is in the last sentence of the proof: "Once we have established that there are no collisions of these types, it will follow that all values associated with non-root nodes are random and ind …
Yehuda Lindell's user avatar