Why is RMAC resistant to birthday attacks?

Ed Gerck egerck at nma.com
Wed Oct 23 22:41:52 EDT 2002



David Wagner wrote:

> Ed Gerck  wrote:
> >(A required property of MACs is providing a uniform distribution of values for a
> >change in any of the input bits, which makes the above sequence extremely
> >improbable)
>
> Not so.  This is not a required property for a MAC.
> (Not all MACs must be PRFs.)

Thanks. I should have written "a usually required property". In general,
to have a good MAC, we require a good PRF.

Ed Gerck


---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at wasabisystems.com



More information about the cryptography mailing list