HMAC seems a bit complicated. Why can't we use $H(m||k)$ as a MAC? Unlike $H(k||m)$, length extension attacks won't work.
Is there some other obvious attack?
Asked
Active
Viewed 139 times
