HMAC

E37198

cryptographic construction keyed hash function message authentication code

HMAC (Hash-based Message Authentication Code) is a cryptographic construction that combines a secret key with a hash function to provide data integrity and authentication.

Try in SPARQL Jump to: Surface forms Disambiguation Statements Elicitation Referenced by

AI illustration

All labels observed (16)

Label	Occurrences
HMAC canonical	21
HMAC-SHA-96	3
HMAC-SHA1	3
HMAC-MD5-96	2
Truncated HMAC extension	2
HKDF (HMAC‑based Key Derivation Function)	1
HMAC construction	1
HMAC-MD5	1
HMAC-MD5-96 authentication protocol	1
HMAC-SHA256	1
HMAC: Keyed-Hashing for Message Authentication	1
HMAC: Keyed‑Hashing for Message Authentication	1
Hash-based Message Authentication Code	1
On the security of HMAC and NMAC	1
The Keyed-Hash Message Authentication Code (HMAC)	1
Truncated HMAC	1

How this entity was disambiguated

This entity first appeared as the object of triple T287183 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.

NED1 Entity disambiguation (via context triple) gpt-5-mini-2025-08-07

Target entity: HMAC
Context triple: [RFC 5246, uses, HMAC]

A. AES-GCM
AES-GCM is an authenticated encryption mode of the Advanced Encryption Standard that provides both data confidentiality and integrity, widely used in modern network and security protocols.
B. Diffie–Hellman key exchange
Diffie–Hellman key exchange is a foundational cryptographic protocol that enables two parties to securely establish a shared secret over an insecure communication channel.
C. ChaCha20
ChaCha20 is a modern stream cipher designed by Daniel J. Bernstein, widely used for its high performance and strong security in protocols like TLS.
D. RSA
RSA is a widely used public-key cryptographic algorithm that enables secure key exchange and digital signatures in many internet security protocols.
E. RC4 stream cipher
The RC4 stream cipher is a once-widely used symmetric key algorithm known for its simplicity and speed in software, but now considered insecure due to multiple discovered vulnerabilities.
F. None of above. chosen
G. Unsure - the case is ambiguous/there is not enough information to decide.

NED2 Entity disambiguation (via description) gpt-5-mini-2025-08-07

Target entity: HMAC
Target entity description: HMAC (Hash-based Message Authentication Code) is a cryptographic construction that combines a secret key with a hash function to provide data integrity and authentication.

A. AES-GCM
AES-GCM is an authenticated encryption mode of the Advanced Encryption Standard that provides both data confidentiality and integrity, widely used in modern network and security protocols.
B. Diffie–Hellman key exchange
Diffie–Hellman key exchange is a foundational cryptographic protocol that enables two parties to securely establish a shared secret over an insecure communication channel.
C. ChaCha20
ChaCha20 is a modern stream cipher designed by Daniel J. Bernstein, widely used for its high performance and strong security in protocols like TLS.
D. RSA
RSA is a widely used public-key cryptographic algorithm that enables secure key exchange and digital signatures in many internet security protocols.
E. RC4 stream cipher
The RC4 stream cipher is a once-widely used symmetric key algorithm known for its simplicity and speed in software, but now considered insecure due to multiple discovered vulnerabilities.
F. None of above. chosen

Statements (49)

Predicate	Object
instanceOf	cryptographic construction ⓘ keyed hash function ⓘ message authentication code ⓘ
advantage	no need for new primitives beyond hash ⓘ simple to implement ⓘ widely supported in libraries ⓘ
canBeTruncated	yes ⓘ
comparisonRequirement	constant-time comparison recommended ⓘ
component	inner hash computation ⓘ outer hash computation ⓘ
constructionType	hash-based MAC ⓘ
definedOver	iterated hash functions ⓘ
designGoal	black-box use of hash function ⓘ provable security under standard assumptions ⓘ
fullName	Hash-based Message Authentication Code ⓘ linked to: HMAC
introducedBy	Hugo Krawczyk ⓘ Mihir Bellare ⓘ Ran Canetti ⓘ
keyProcessing	keys longer than block size are hashed ⓘ keys shorter than block size are padded with zeros ⓘ
outputType	authentication tag ⓘ fixed-length tag ⓘ
property	resistant to length extension attacks (when underlying hash is vulnerable) ⓘ
provides	data integrity ⓘ message authentication ⓘ origin authentication ⓘ
recommendedKeyLength	at least as long as hash output ⓘ
requires	shared secret key ⓘ
securityDependsOn	key secrecy ⓘ secret key length ⓘ underlying hash function ⓘ
standardizedIn	FIPS 198-1 ⓘ RFC 2104 ⓘ
typicalHashFunction	MD5 ⓘ SHA-1 ⓘ SHA-256 ⓘ SHA-512 ⓘ
usedFor	API authentication ⓘ IPsec ⓘ JSON Web Tokens (JWT) ⓘ SSH ⓘ TLS ⓘ message integrity checks ⓘ
uses	cryptographic hash function ⓘ secret key ⓘ
usesConstant	inner padding (ipad) ⓘ outer padding (opad) ⓘ
verificationMethod	recompute and compare tag ⓘ
yearIntroduced	1996 ⓘ

How these facts were elicited

Referenced by (42)

Full triples — surface form annotated when it differs from this entity's canonical label.

RFC 5246 → uses → HMAC ⓘ

IPsec → commonlyUsesAlgorithm → HMAC-SHA1 ⓘ

linked to: HMAC

SNMPv3 → supportsAuthenticationProtocol → HMAC-MD5-96 ⓘ

linked to: HMAC

SNMPv3 → supportsAuthenticationProtocol → HMAC-SHA-96 ⓘ

linked to: HMAC

RFC 4346 → supports → HMAC ⓘ

HMAC → fullName → Hash-based Message Authentication Code ⓘ

linked to: HMAC

TLS 1.0 → supportsMAC → HMAC-SHA1 ⓘ

linked to: HMAC

Poly1305 → comparedTo → HMAC ⓘ

RFC 3414 → authenticationProtocol → HMAC-MD5-96 ⓘ

linked to: HMAC

RFC 3414 → authenticationProtocol → HMAC-SHA-96 ⓘ

linked to: HMAC

RFC 3546 → defines → Truncated HMAC extension ⓘ

linked to: HMAC

Carter–Wegman MACs → contrastWith → HMAC ⓘ

OpenSSL → supportsAlgorithm → HMAC ⓘ

User-based Security Model → uses → HMAC-MD5-96 authentication protocol ⓘ

linked to: HMAC

RFC 2574 → usesAlgorithm → HMAC-SHA-96 ⓘ

linked to: HMAC

TLS 1.2 PRF → basedOn → HMAC ⓘ

RFC 2104 → title → HMAC: Keyed-Hashing for Message Authentication ⓘ

linked to: HMAC

RFC 2104 → defines → HMAC ⓘ

FIPS 198-1 → fullName → The Keyed-Hash Message Authentication Code (HMAC) ⓘ

linked to: HMAC

FIPS 198-1 → defines → HMAC ⓘ

TSIG → supports → HMAC-SHA256 ⓘ

linked to: HMAC

Hugo Krawczyk → knownFor → HMAC ⓘ

Hugo Krawczyk → notableWork → HMAC: Keyed‑Hashing for Message Authentication ⓘ

linked to: HMAC

Hugo Krawczyk → notableWork → On the security of HMAC and NMAC ⓘ

linked to: HMAC

Hugo Krawczyk → notableConcept → HMAC construction ⓘ

linked to: HMAC

Hugo Krawczyk → notableConcept → HKDF (HMAC‑based Key Derivation Function) ⓘ

linked to: HMAC

RFC 6066 → defines → Truncated HMAC extension ⓘ

linked to: HMAC

LibreSSL → implements → HMAC ⓘ

ItsDangerous → supportsAlgorithm → HMAC ⓘ

SHA-2 → usedFor → HMAC ⓘ

PBKDF2 → typicallyUses → HMAC ⓘ

RFC 5849 → uses → HMAC-SHA1 ⓘ

linked to: HMAC

RFC 2195 → usesAlgorithm → HMAC-MD5 ⓘ

linked to: HMAC

UMAC → relatedConcept → HMAC ⓘ

VMAC → comparedWith → HMAC ⓘ

RFC 2845 → uses → HMAC ⓘ

Cryptographic Extraction and Key Derivation: The HKDF Scheme → basedOn → HMAC ⓘ

subject linked to: Cryptographic extraction and key derivation: The HKDF scheme

Cryptographic Extraction and Key Derivation: The HKDF Scheme → relatedTo → HMAC ⓘ

subject linked to: Cryptographic extraction and key derivation: The HKDF scheme

RFC 5172 → uses → HMAC ⓘ

RFC 5172 → subject → HMAC ⓘ

RFC 4366 → definesExtension → Truncated HMAC ⓘ

linked to: HMAC

TOTP RFC 6238 → uses → HMAC ⓘ

All labels observed (16)

How this entity was disambiguated Show

Statements (49)

How these facts were elicited Show

Referenced by (42)

How this entity was disambiguated

How these facts were elicited