Why is RMAC resistant to birthday attacks?

[David Wagner]

Ed Gerck  wrote:
>(A required property of MACs is providing a uniform distribution of values for a
>change in any of the input bits, which makes the above sequence extremely
>improbable)

Not so.  This is not a required property for a MAC.
(Not all MACs must be PRFs.)

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at wasabisystems.com