Security Analysis of HMAC/NMAC by Using Fault Injection

Table 1

Our attack results on HMAC/NMAC.

Algorithm	No. of injected faults	Algorithm	No. of injected faults
HMAC-MD4	[𝑛/3]	NMAC-MD4	2⋅[𝑛/3]
HMAC-MD5	[𝑛/3]	NMAC-MD5	2⋅[𝑛/3]
HMAC-SHA-224	[𝑛/3]	NMAC-SHA-224	[𝑛/3]+[𝑛/2]
HMAC-SHA-256	[𝑛/3]	NMAC-SHA-256	2⋅[𝑛/3]
HMAC-SHA-384	[𝑛/3]	NMAC-SHA-384	[𝑛/3]+𝑛
HMAC-SHA-512	[𝑛/3]	NMAC-SHA-512	2⋅[𝑛/3]