Message Authentication Functions

Hash function-based MAC (HMAC) is widely used in the applications requiring message authentication and data integrity check. HMAC was initially put forward in [RFC 2401] and adopted by ANSI X9.71 and [FIPS PUB 198]. See Keyed Hash Functions for a description of the Intel® Integrated Performance Primitives (Intel® IPP) HMAC primitives.

A MAC algorithm based on a symmetric key block cipher, in other words, a cipher-based MAC (CMAC), is standardized in [NIST SP 800-38B]. CMAC may be appropriate for information systems where an approved block cipher is available rather than an approved hash function. See CMAC Functions for a description of the Intel IPP CMAC primitives.

AES-XCBC-MAC-96A, a specialization of MAC based on the AES block cipher in conjunction with the Cipher-Block-Chaining (CBC) mode of operation, is standardized in [RFC 3566] and has proved its security not only for messages of pre-selected fixed lengths but also for messages of varying lengths, such as used in typical IP datagrams. See AES-XCBC Functions for a description of the Intel IPP AES-XCBC-MAC-96A primitives.

See Also

Submit feedback on this help topic

Copyright © 2000 - 2010, Intel Corporation. All rights reserved.