What is ISO/IEC 9797‑2 about?
Hash function is a function that maps strings of bits of variable (but usually upper bounded) length to fixed-length strings of bits, satisfying the following two properties:
- For a given output, it is computationally infeasible to find an input that maps to this output
- For a given input, it is computationally infeasible to find a second input that maps to the same output
ISO/IEC 9797‑2 specifies message authentication codes (MAC) algorithms that use a secret key and a hash function (or its round function or sponge function) to calculate an m-bit MAC. These mechanisms can be used as data integrity mechanisms to verify that data has not been altered in an unauthorized manner.
Who is ISO/IEC 9797‑2 for?
ISO/IEC 9797‑2 on message authentication codes is useful for:
- Information security system developers
- MAC programmers
- Data privacy authorities
- Cybercrime forensic investigators
Why should you use ISO/IEC 9797‑2 ?
Message authentication codes (MACs) are primarily used for password protection and authentication. Another use of hashes is with public key authentication/. By adopting ISO/IEC 9797‑2, authentication can be made more secure. signing. By adopting ISO/IEC 9797‑2, authentication can be made more secure.
ISO/IEC 9797‑2 can help in enhancing the integrity of the data by allowing verifiers (who also possess the secret key) to detect any changes to the message content. ISO/IEC 9797‑2 can help to offer secure communications between the sender and the receiver. The application made by following guidelines of ISO/IEC 9797‑2 can provide assurance to the user about the correctness of the data
What’s changed since the last update?
ISO/IEC 9797‑2 cancels and replaces the second edition (ISO/IEC 9797-2:2011), which has been technically revised. The main changes compared to the previous edition are as follows:
- Using dedicated hash-function 17 for MAC Algorithms 1 and 3 has been added
- Using dedicated hash-functions 11, 12, 13 to 16, and 17 for MAC Algorithm 2 has been added
- MAC Algorithm 4 based on Keccak, a primitive in the definition of dedicated hash-functions 13 to 16 has been added

