RFC 2104: HMAC: Keyed-Hashing for Message Authentication

This document describes HMAC, a mechanism for message authentication using cryptographic hash functions. HMAC can be used with any iterative cryptographic…

Read RFC 2104 on the RFC Editor

Incoming relationships (174 related RFCs)

Showing 50 of 174 related RFCs.

Updated by, Informatively referenced by — RFC 6151: Updated Security Considerations for the MD5 Message-Digest and the HMAC-MD5 Algorithms
Normatively referenced by — RFC 3315: Dynamic Host Configuration Protocol for IPv6 (DHCPv6)
Normatively referenced by — RFC 3711: The Secure Real-time Transport Protocol (SRTP)
Normatively referenced by — RFC 6066: Transport Layer Security (TLS) Extensions: Extension Definitions
Normatively referenced by — RFC 3414: User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3)
Normatively referenced by — RFC 5304: IS-IS Cryptographic Authentication
Normatively referenced by — RFC 5310: IS-IS Generic Cryptographic Authentication
Normatively referenced by — RFC 6275: Mobility Support in IPv6
Normatively referenced by — RFC 5869: HMAC-based Extract-and-Expand Key Derivation Function (HKDF)
Normatively referenced by — RFC 4380: Teredo: Tunneling IPv6 over UDP through Network Address Translations (NATs)
Normatively referenced by — RFC 4253: The Secure Shell (SSH) Transport Layer Protocol
Normatively referenced by — RFC 8754: IPv6 Segment Routing Header (SRH)
Normatively referenced by — RFC 7518: JSON Web Algorithms (JWA)
Normatively referenced by — RFC 4366: Transport Layer Security (TLS) Extensions
Normatively referenced by — RFC 5661: Network File System (NFS) Version 4 Minor Version 1 Protocol
Normatively referenced by — RFC 5944: IP Mobility Support for IPv4, Revised
Normatively referenced by — RFC 8152: CBOR Object Signing and Encryption (COSE)
Normatively referenced by — RFC 6833: Locator/ID Separation Protocol (LISP) Map-Server Interface
Normatively referenced by — RFC 6979: Deterministic Usage of the Digital Signature Algorithm (DSA) and Elliptic Curve Digital Signature Algorithm (ECDSA)
Normatively referenced by — RFC 4187: Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement (EAP-AKA)
Normatively referenced by — RFC 4307: Cryptographic Algorithms for Use in the Internet Key Exchange Version 2 (IKEv2)
Normatively referenced by — RFC 8684: TCP Extensions for Multipath Operation with Multiple Addresses
Normatively referenced by — RFC 5289: TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode (GCM)
Normatively referenced by — RFC 5802: Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms
Normatively referenced by — RFC 9053: CBOR Object Signing and Encryption (COSE): Initial Algorithms
Normatively referenced by — RFC 3546: Transport Layer Security (TLS) Extensions
Normatively referenced by — RFC 4186: Extensible Authentication Protocol Method for Global System for Mobile Communications (GSM) Subscriber Identity Modules (EAP-SIM)
Normatively referenced by — RFC 3576: Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS)
Normatively referenced by — RFC 4004: Diameter Mobile IPv4 Application
Normatively referenced by — RFC 6189: ZRTP: Media Path Key Agreement for Unicast Secure RTP
Normatively referenced by — RFC 8762: Simple Two-Way Active Measurement Protocol
Normatively referenced by — RFC 6257: Bundle Security Protocol Specification
Normatively referenced by — RFC 8489: Session Traversal Utilities for NAT (STUN)
Normatively referenced by — RFC 5054: Using the Secure Remote Password (SRP) Protocol for TLS Authentication
Normatively referenced by — RFC 5296: EAP Extensions for EAP Re-authentication Protocol (ERP)
Normatively referenced by — RFC 5448: Improved Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement (EAP-AKA')
Normatively referenced by — RFC 6696: EAP Extensions for the EAP Re-authentication Protocol (ERP)
Normatively referenced by — RFC 7182: Integrity Check Value and Timestamp TLV Definitions for Mobile Ad Hoc Networks (MANETs)
Normatively referenced by — RFC 3957: Authentication, Authorization, and Accounting (AAA) Registration Keys for Mobile IPv4
Normatively referenced by — RFC 6955: Diffie-Hellman Proof-of-Possession Algorithms
Normatively referenced by — RFC 4308: Cryptographic Suites for IPsec
Normatively referenced by — RFC 5489: ECDHE_PSK Cipher Suites for Transport Layer Security (TLS)
Normatively referenced by — RFC 5849: The OAuth 1.0 Protocol
Normatively referenced by — RFC 7836: Guidelines on the Cryptographic Algorithms to Accompany the Usage of Standards GOST R 34.10-2012 and GOST R 34.11-2012
Normatively referenced by — RFC 8972: Simple Two-Way Active Measurement Protocol Optional Extensions
Normatively referenced by — RFC 9145: Integrity Protection for the Network Service Header (NSH) and Encryption of Sensitive Context Headers
Normatively referenced by — RFC 3520: Session Authorization Policy Element
Normatively referenced by — RFC 3821: Fibre Channel Over TCP/IP (FCIP)
Normatively referenced by — RFC 4169: Hypertext Transfer Protocol (HTTP) Digest Authentication Using Authentication and Key Agreement (AKA) Version-2
Normatively referenced by — RFC 4357: Additional Cryptographic Algorithms for Use with GOST 28147-89, GOST R 34.10-94, GOST R 34.10-2001, and GOST R 34.11-94 Algorithms