

0 / 2 embers
0 / 3000 xp
click for more info
Complete a lesson to start your streak
click for more info
Difficulty: 5
click for more info
Not enough gems
Cost: 6 gems
1: What Is a Message Integrity?
incomplete
2: Message Authentication Code (MAC)
incomplete
3: Message Authentication Code (MAC)
incomplete
4: Hash-Based Message Authentication Code
incomplete
5: Toy HMAC
incomplete
6: MACs and JWTs
incomplete
7: Asymmetric JWTs
incomplete
8: Asymmetric JWT Review
incomplete
Back
ctrl+,
Next
ctrl+.
This lesson's interactive features are locked, please to keep using them
While checksums are useful on their own, they provide no authentication mechanism. For example, if the NSA intercepts a message in transit, they can maliciously alter the message and the checksum. When the message is received by the original recipient, they will think it hasn't been altered.
All a plain checksum does is protect against accidental alterations.
To get the protection we want from malicious attackers, we need to use a MAC, or Message Authentication Code
In short, a MAC is a checksum that is authenticated by a secret key. This means that if the message is altered by someone who doesn't have the secret key, the checksum will not match.