ISC Exam Questions

Which of the following best describes the difference between HMAC and CBC-MAC?

Which of the following best describes the difference between HMAC and CBC-MAC?

A.
HMAC creates a message digest and is used for integrity; CBC-MAC is used to encrypt blocks of data for confidentiality.

B.
HMAC uses a symmetric key and a hashing algorithm; CBC-MAC uses the first block for the checksum.

C.
HMAC provides integrity and data origin authentication; CBC-MAC uses a block cipher for the process of creating a MAC.

D.
HMAC encrypts a message with a symmetric key and then puts the result through a hashing algorithm; CBC-MAC encrypts the whole message.

Explanation:
C: In an HMAC operation, a message is concatenated with a symmetric key and the result is put through a hashing algorithm. This provides integrity and system or data authentication. CBC-MAC uses a block cipher to create a MAC, which is the last block of ciphertext.