A new key recovery attack on the ANSI retail MAC
Chris J. Mitchell · Royal Holloway Digital Repository (Royal Holloway University of London) · 2002
A new type of attack is introduced which takes advantage of MAC truncation to simplify key recovery attacks based on MAC verifications. One example of the attack is described which, in certain circumstances, enables a more e#cient attack than was previously known to be launched against the ANSI retail MAC. The existence of this attack means that truncation for this MAC scheme should be used with greater care than was previously believed, and very short MACs should be avoided altogether.