liveBook · Manning

GMAC

As explained in Real-World Cryptography

GMAC is a message authentication code built from the GHASH keyed hash and AES-CTR encryption of its output.

GMAC is a message authentication code: it turns input into an authentication tag so a receiver can detect tampering. It combines GHASH with AES-CTR, using GHASH to process the input and AES-CTR to encrypt the resulting digest. section 4.5.2

Nonce reuse warning

AES-CTR requires a unique nonce. Reusing one creates the same keystream, allowing two ciphertexts to reveal the XOR of their plaintexts. section 4.5.2

How Real-World Cryptography covers it

How deep it goes
Builds the tag from GHASH and AES-CTR, including block processing and nonce-reuse consequences.
Examples
Uses AES-GCM, TLS-secured websites, GHASH diagrams, and AES-CTR nonce behavior as concrete illustrations.
What you can do after
Understand how GMAC produces authentication tags and why AES-GCM requires unique nonces.
How it connects
Connects GHASH, AES-CTR, AES-GCM, AES, associated data, ciphertext, and TLS.

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Real-World Cryptography. The section links point to the parts of the book it draws on.