comparing RMAC to AES+CBC-MAC or XCBC (Re: Why is RMAC resistant to birthday attacks?)

[Jack Lloyd]

On Tue, 22 Oct 2002, Adam Back wrote:

> The one difference which is an incremental improvement over raw
> CBC-MAC is that the final CBC-MAC a-like output is encrypted with the
> 2nd key K3.  (K3 defined as K2 xor salt, K2 an independent key).

Which isn't even a new idea (it's done in ANSI X9.19, for example).
 -Jack


---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at wasabisystems.com