Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options questions only not deleted user 4640

HMAC is a method for constructing a message authentication code based on a cryptographic hash function.

33 votes
2 answers
25k views

Is HMAC-MD5 considered secure for authenticating encrypted data?

I've read something to the effect that the HMAC construct is able to lessen the problem of collisions in the underlying hash. … Does that mean that something like HMAC-MD5 still might be considered safe for authenticating encrypted data? …
Nuoji's user avatar
  • 803
0 votes
2 answers
1k views

Recommended authenticated stream cipher for minimum overhead?

I'm running my TCP/IP protocol secured by encrypting each packet with AES128/CBC, bundling a SHA256 HMAC over that packet. … This causes quite a bit of space overhead for small packets, so at first I was thinking of running AES in CTR-mode and still use the HMAC, but it would be much better to run some sort of stream cipher …
Nuoji's user avatar
  • 803
3 votes
1 answer
538 views

Is this an acceptable authenticated encryption?

Calculate HMAC-SHA256(signing key, 4 byte message number || 4 byte message length || ciphertext) Increase message number by 1. … Send ciphertext || first 8 bytes of HMAC On decryption, checking HMAC is made so that successful matching the HMAC and failing to match the HMAC should execute equally fast. …
Nuoji's user avatar
  • 803