Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
Cipher Block Chaining MAC (CBC-MAC) is a method of building a message authentication code from a block-cipher.
3
votes
Why is CBC-MAC with length appended not secure?
I'll give you a hint, and you can work out the details yourself.
Take any $m_1,m_2,m_3$ of length $n$ (where $n$ is the block length), with $m_1\neq m_2$. Query the oracle with $m_1$, then query the …
3
votes
Accepted
Would a simplified CBC-MAC be safe?
I'll assume that you a prefix-free encoding (or fixed-length messages) to solve that problem of CBC-MAC. It's actually very possible that this would be secure since the proof of CBC-MAC pretty much wo …
3
votes
Accepted
Security proof for CBC as a prefix-free PRF
The answer is in the last sentence of the proof: "Once we have established that there are no collisions of these types, it will follow that all values associated with non-root nodes are random and ind …