Re:The Little MAC Attack
by mckiddy on Tuesday May 12, 2015 @09:18PM
(#9536124)
If you know the HMAC key, why would you ever need to generate a collision? You can just reevaluate the MAC and replace the old one.
[ Parent
| on HN ]
Re:The Little MAC Attack
by jessaustin on Tuesday May 12, 2015 @09:31PM
(#9536177)
I think the point was that if some dumb protocol were misusing HMAC (and I'm not good enough at thinking about protocols to imagine how it might do so), it could be vulnerable to collisions generated this way.
The point of the parent commenter is that a misuse of HMAC that gives attackers knowledge of the key admits much simpler attacks than this.
Yup.
"This almost certainly doesn’t have any security impact, but I’m happy(ish) to be proved wrong."
There's a few words I'd remove from that sentence, I guess.
SNARK REDACTED
See this kind of snark is usually what gets 'pbsd to come out of the shadows and smack me down. Your turn this time!
Re:The Little MAC Attack
by sarciszewski on Wednesday May 13, 2015 @02:55PM
(#9541178)
I think it's because you're not wrong here. :D