Re: AES-CMAC - MAC lengths other than 128

For generation: Can't the JS truncate the MAC after it gets the full result
back?

For verification: I'm wary of having the API accept arbitrarily short MACs.
 You would need to specify acceptable lengths in order to avoid things like
an 8-bit MAC being accepted.  Is there standard practice / documentation
for these lengths?


On Thu, Feb 20, 2014 at 10:55 PM, Jim Schaad <ietf@augustcellars.com> wrote:

> Starting with the editorial note in section 18.12.1 - I would be  a strong
> advocate that MAC lengths other than 128 should be supported by the
> algorithm.  There is a section of the security community (no comment as it
> the correctness of its view) that states that security is increased by
> truncating the MAC from 128 to 96 bits.  This is a feature that people will
> want supported.
>
>
>
> Jim
>
>
>