Does [HMAC] (p. 14) corresponds to [KRAW] (p. 63)? There is not [HMAC] in the bibliography. Does this reference corresponds to the RFC 2104 "HMAC: Keyed-Hashing for Message Authentication", also by Hugo Krawczyk? If so, I think it's a better reference. Luis Saiz