The main advantage of HMAC over other proposed hash based schemes is that HMAC can be proven secure, provided that the embedded hash function has some reasonable cryptographic strengths.

Question

Quizplus · Accepted Answer

HMAC (Hash-based Message Authentication Code) is designed to work with any iterative cryptographic hash function, such as MD5 or SHA-1, in a way that is provably secure as long as the underlying hash function has certain cryptographic strengths. The security of HMAC does not rely on the hash function properties (like collision resistance) but rather on its ability to behave as a pseudorandom function. This means that if the hash function is secure in the sense of being a good pseudorandom function, then the HMAC construction can also be proven secure.

The Main Advantage of HMAC Over Other Proposed Hash Based