MacDES: MAC algorithm based on DES
Lars Ramkilde Knudsen, Bart Preneel · Electronics Letters · 1998
A new message authentication code (MAC) algorithm is proposed, which improves the popular retail MAC based on the data encryption standard; it has the same complexity, but provides better resistance against key recovery attacks. In addition, a new key recovery attack on the retail MAC is presented, requiring a single known text-MAC pair and 256 online MAC verifications.