HMAC-Keyed-HashingforMessageAuthentication.pdf资源-CSDN下载

HMAC

2104

需积分: 10 51 浏览量 2019-06-11 22:44:02 上传评论收藏 28KB PDF 举报

资源推荐

资源详情

资源评论

Network Working Group H. Krawczyk

Request for Comments: 2104 IBM

Category: Informational M. Bellare

UCSD

R. Canetti

IBM

February 1997

HMAC: Keyed-Hashing for Message Authentication

Status of This Memo

This memo provides information for the Internet community. This memo

does not specify an Internet standard of any kind. Distribution of

this memo is unlimited.

Abstract

This document describes HMAC, a mechanism for message authentication

using cryptographic hash functions. HMAC can be used with any

iterative cryptographic hash function, e.g., MD5, SHA-1, in

combination with a secret shared key. The cryptographic strength of

HMAC depends on the properties of the underlying hash function.

1. Introduction

Providing a way to check the integrity of information transmitted

over or stored in an unreliable medium is a prime necessity in the

world of open computing and communications. Mechanisms that provide

such integrity check based on a secret key are usually called

"message authentication codes" (MAC). Typically, message

authentication codes are used between two parties that share a secret

key in order to validate information transmitted between these

parties. In this document we present such a MAC mechanism based on

cryptographic hash functions. This mechanism, called HMAC, is based

on work by the authors [

BCK1] where the construction is presented and

cryptographically analyzed. We refer to that work for the details on

the rationale and security analysis of HMAC, and its comparison to

other keyed-hash methods.

Krawczyk, et. al. Informational [Page 1]

RFC 2104

HMAC February 1997

HMAC can be used in combination with any iterated cryptographic hash

function. MD5 and SHA-1 are examples of such hash functions. HMAC

also uses a secret key for calculation and verification of the

message authentication values. The main goals behind this

construction are

* To use, without modifications, available hash functions.

In particular, hash functions that perform well in software,

and for which code is freely and widely available.

* To preserve the original performance of the hash function without

incurring a significant degradation.

* To use and handle keys in a simple way.

* To have a well understood cryptographic analysis of the strength of

the authentication mechanism based on reasonable assumptions on the

underlying hash function.

* To allow for easy replaceability of the underlying hash function in

case that faster or more secure hash functions are found or

required.

This document specifies HMAC using a generic cryptographic hash

function (denoted by H). Specific instantiations of HMAC need to

define a particular hash function. Current candidates for such hash

functions include SHA-1 [

SHA], MD5 [MD5], RIPEMD-128/160 [RIPEMD].

These different realizations of HMAC will be denoted by HMAC-SHA1,

HMAC-MD5, HMAC-RIPEMD, etc.

Note: To the date of writing of this document MD5 and SHA-1 are the

most widely used cryptographic hash functions. MD5 has been recently

shown to be vulnerable to collision search attacks [

Dobb]. This

attack and other currently known weaknesses of MD5 do not compromise

the use of MD5 within HMAC as specified in this document (see

[

Dobb]); however, SHA-1 appears to be a cryptographically stronger

function. To this date, MD5 can be considered for use in HMAC for

applications where the superior performance of MD5 is critical. In

any case, implementers and users need to be aware of possible

cryptanalytic developments regarding any of these cryptographic hash

functions, and the eventual need to replace the underlying hash

function. (See

section 6 for more information on the security of

HMAC.)

Krawczyk, et. al. Informational [Page 2]

剩余10页未读，继续阅读

评论收藏

内容反馈

beebeeyoung

粉丝: 19

HMAC-Keyed-Hashing for Message Authentication.pdf

最新资源

HMAC-Keyed-Hashing for Message Authentication.pdf

基于FPGA的HMAC-SM3硬件实现.pdf

Digest-HMAC-1.03.tar.gz

hmac-sha256.zip_HMAC-SHA224_hmac_hmac sha2_hmac sha256 c++_hmac-

hmac加密算法的JS文件hmac-sha1.js

hmac.rar_HMAC-MD5_hmac_hmac-sha1

HMAC-SHA256和HMAC-SHA1加密C语言代码

hmac-sha1.rar

HMAC-MD5_delphi.rar

hmac-sha256.js 资源文件，jwt时用到

hmac-sha1简单实现

perl-Digest-HMAC-1.03-5.el7.noarch.rpm

HMAC-SHA1 算法签名 亲测可用

HMAC-SHA1算法

HMAC-SHA1含密钥的安全哈希算法

Keying Hash Functions for Message Authentication.pdf

HMAC-SHA1 js包下载

HMAC-SHA-1算法C++实现

HMAC-SHA1算法的VC DLL

HMAC-sha256.zip

perl-Digest-HMAC-1.03-5.el7.x64-86.rpm.tar.gz

hmac-sha1-c-code.zip

利用JAVASCRIPT HMAC-MD5算法增强用户的密码安全

HMAC-SHA1/SHA256/MD5标准dll

delphi 实现hmac-md5加密算法

C/C++实现HMAC-SHA1和base64编码

ESP和AH中HMAC-SHA-1-96的使用(rfc2404).txt

HMAC-SHA-1 生成加密的消息摘要

腾讯云·短信·TC3-HMAC-SHA256API3.0签名V3算法带发送例子

hmac-md5.rar_HMAC-MD5 ASP_asp md5_hmac asp_md5_md5 asp

[C语言]一本很厚的C语言学习笔记——第一章（谭浩强版本）

CV_YUV2GRAY_NV12

最新资源

HMAC-SHA1 算法签名亲测可用