KS X ISO/IEC 9797-2:2013 Information technology — Security techniques — message Authentic Codes (MACs) — Part 2: Mechanisms using a dedicated hash-function
This standard specifies three MAC algorithms that use a hash function (or round function thereof) with one secret key and one n-bit result to calculate one m-bit MAC. This mechanism can be used as a data integrity mechanism to verify that data has not been altered in an unauthorized manner. This can also be used as a message authentication mechanism to ensure that a message was created by the entity that owns the secret key. The strength of the data integrity mechanism and the message authentication mechanism depends on the secrecy and entropy of the key, the (bit) size n of the hash code generated by the hash function, the strength of the hash function, the (bit) size of the MAC, m, and the corresponding mechanism. This standard defines three mechanisms and is based on the dedicated hash function specified in KS The first mechanism is commonly called MDx-MAC and is slightly modified by adding an additional key in the round function. The second mechanism is usually called HMAC and does the hash function twice. The third mechanism, usually called the MDx-MAC variant, takes a short string (usually 256 bits) as input. Input of short data strings provides high performance for applications. This standard is intended for any security structure, processing or application.
KS X ISO/IEC 9797-2:2013 history
2024KS X ISO/IEC 9797-2-2024 Information security — Message authentication codes(MACs) — Part 2: Mechanisms using a dedicated hash-function
0000 KS X ISO/IEC 9797-2-2013(2018)
2013KS X ISO/IEC 9797-2:2013 Information technology — Security techniques — message Authentic Codes (MACs) — Part 2: Mechanisms using a dedicated hash-function