HMAC: Keyed-Hashing for Message Authentication

By Hugo Krawczyk, Mihir Bellare, Ran Canetti. 1997

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Citations in the corpus

Machine Learning Models that Remember Too Much (2017, background): “The adversary can use any suitable GenData method: for example, generate pseudorandom images using the adversary’s choice of pseudorandom function (PRF) (e.g., HMAC [39]) or else create sparse images where only one pixel is filled with a (similarly generated) pseudorandom value.”
New Proofs for NMAC and HMAC: Security without Collision Resistance (2006, methodology): “Single-key HMAC as defined and analyzed above is the core construct of the RFC 2104 standard [27].”
Security and Cooperation in Wireless Networks (2007, methodology): “An example of this approach is HMAC [238], which is a very widely”
Security Analysis of a Cryptographically-Enabled RFID Device (2005, methodology): “, the Advanced Encryption Standard (AES) in its 128-bit form, or more appropriately for this application, HMAC-SHA1 [14].”
A taxonomy of privacy-preserving record linkage techniques (2013, background): “The Hashed Message Authentication Code (HMAC) function [91] is one such approach.”
Intercepting mobile communications: the insecurity of 802.11 (2001, background): “Only a keyed message authentication code (MAC) such as SHA1HMAC [13] will offer sufficient strength to prevent this attack.”
Secure Routing for Mobile Ad hoc Networks (2024, methodology): “The source and destination and the unique (with respect to the pair of end nodes) query identifiers are the input for the calculation of the Message Authentication Code (MAC) [9], along with KS,T.”
Architectural support for copy and tamper resistant software (2000, methodology): “As an example, we will consider an HMAC [15] implementation using MD5 [13].”
The Skein Hash Function Family (2009, methodology): “(HMAC is standardized via an IETF RFC [63], a NIST FIPS [85], and ANSI X9.”
Off-the-record communication, or, why not to use PGP (2004, unknown): “We use libgcrypt [13] library for the cryptographic functions, using AES [23] for encryption, RSA [29] for digital signatures, and SHA1-HMAC [22, 17] for MAC authentication.”
Secure Indexes (2003, methodology): “HMAC-SHA1 [2] is used as the pseudo-random function f .”
Introduction and Applicability Statements for Internet-Standard Management Framework (2002, methodology): “The USM utilizes MD5 [31] and the Secure Hash Algorithm [32] as keyed hashing algorithms [ 33 ] for digest computation to provide data integrity:”
Cloud Computing Security: From Single to Multi-clouds (2012, background): “Garfinkel claims that instead of following Amazon’s advice that organizations encrypt data before storing them in Amazon S3, organizations should use HMAC [26] technology or a digital signature to ensure data is not modified by Amazon S3.”
An Evaluation of Amazon's Grid Computing Services: EC2, S3, and SQS (2007, unknown): “The virtual machines “predictably provides the equivalent of a system with a 1.7Ghz x86 processor, 1.75GB of RAM, 160GB of local disk, and 250Mb/s of network bandwidth.””
Lecture Notes on Cryptography (2001, methodology): “In particular HMAC was recently chosen as the mandatory to implement authentication transform for Internet security protocols and for this purpose is described in an Internet RFC [127].”
Advanced and authenticated marking schemes for IP traceback (2001, background): “This technique only uses one cryptographic MAC (Message Authentication Code) computation per marking, which is orders of magnitude more efﬁcient to compute (i.e., HMAC-MD5 is three to four orders of magnitude more efﬁcient than 1024-bit RSA signing) and can be adapted so it only requires the 16-bit ”