Full Key-Recovery Attacks on HMAC/NMAC-MD4 and NMAC-MD5

At Crypto ’06, Bellare presented new security proofs for HMAC and NMAC, under the assumption that the underlying compression function is a pseudo-random function family. Conversely, at Asiacrypt ’06, Contini and Yin used collision techniques to obtain forgery and partial key-recovery attacks on HMAC and NMAC instantiated with

• Type: Conference
• Year: 2007
• Where: CRYPTO
• Authors: Pierre-Alain Fouque, Gaëtan Leurent, Phong Q. Nguyen
• Keywords: CRYPTO 2007, HMAC, Pseudo-random Function Family, Yin Used Collision