News for hackers. Stuff that matters.
Re:The Little MAC Attack by mckiddy on Tuesday May 12, 2015 @09:18PM (#9536124)
If you know the HMAC key, why would you ever need to generate a collision? You can just reevaluate the MAC and replace the old one.
Re:The Little MAC Attack by jessaustin on Tuesday May 12, 2015 @09:31PM (#9536177)
I think the point was that if some dumb protocol were misusing HMAC (and I'm not good enough at thinking about protocols to imagine how it might do so), it could be vulnerable to collisions generated this way.
Re:The Little MAC Attack by tptacek on Tuesday May 12, 2015 @09:50PM (#9536257)
The point of the parent commenter is that a misuse of HMAC that gives attackers knowledge of the key admits much simpler attacks than this.
Re:The Little MAC Attack by tptacek on Tuesday May 12, 2015 @09:18PM (#9536125)
Yup.

"This almost certainly doesn’t have any security impact, but I’m happy(ish) to be proved wrong."

There's a few words I'd remove from that sentence, I guess.

Re:The Little MAC Attack by sdevlin on Tuesday May 12, 2015 @09:39PM (#9536212)
SNARK REDACTED
Re:The Little MAC Attack by tptacek on Tuesday May 12, 2015 @09:50PM (#9536261)
See this kind of snark is usually what gets 'pbsd to come out of the shadows and smack me down. Your turn this time!
Re:The Little MAC Attack by sarciszewski on Wednesday May 13, 2015 @02:55PM (#9541178)
I think it's because you're not wrong here. :D