Attacks on MacDES MAC algorithm

Abstract

Two attacks on message authentication code (MAC) algorithm 4 from ISO/IEC FDIS 9797-1 is described, which apply when it is used with padding method 1 or 2, and where no MAC truncation is employed. In this case the attacks are significantly more efficient than the best previously known attack.