On the security margin of MAC striping.
Thomas Eisenbarth, Aaron Meyerowitz, Rainer Steinwandt · 2015
Abstract. MAC striping has been suggested as a technique to authenti-cate encrypted payloads using short tags. For an idealized MAC scheme, the probability of a selective forgery has been estimated as `+m