12.3 At the beginning of Section 12.6, it was noted that given the CBC MAC of a oneblock message X, say T = MAC(K, X), the adversary immediately knows the CBC MAC for the two-block message X || (X + T) since this is once again T. Justify this statement. | |
| View Solution | |
| << Back | Next >> |