Overview
ISO/IEC 9797-2:2021 - Information security - Message authentication codes (MACs) - Part 2: Mechanisms using a dedicated hash-function - specifies standardized MAC algorithms that derive an m‑bit MAC from a secret key and a dedicated hash-function (or its round- or sponge-function). These MAC mechanisms are intended as data integrity primitives to verify that data has not been altered in an unauthorized manner. The third edition (2021) updates algorithm options and adds Keccak-based MAC variants.
Key topics
- MAC algorithms and variants: The standard defines multiple MAC algorithms (Algorithms 1–4) with stepwise procedures such as key expansion, modification of constants/IV, hashing operation (or round-function/sponge application), output transformation, and truncation.
- Dedicated hash-functions: Specifies use of dedicated hash primitives (examples in the standard include RIPEMD‑128/160, SHA‑1, SHA‑224/256/384/512, SM3 and Keccak-based functions). Algorithm 4 includes KMAC/KMACXOF constructions based on Keccak.
- Encoding and padding: Rules for integer/byte encoding, string encoding and padding for input preparation are included.
- Efficiency and constants: Sections address computational efficiency and procedures for computing constants and IV modifications for each dedicated hash-function.
- Security analysis: Annex C provides an informative security analysis of the MAC algorithms and design rationale.
Applications
- Message authentication in network protocols (TLS-like or custom secure channels)
- Data integrity verification for storage, logs, and firmware images
- Authentication tokens and secure APIs where keyed integrity is required
- Cryptographic protocol design and implementation (smart cards, IoT devices, servers)
Practical users include cryptographers, security architects, protocol designers, firmware and software implementers, and compliance officers who must select or validate MAC mechanisms for secure systems.
Who should use this standard
- Implementers building MAC-enabled libraries or hardware who need interoperable, standardized MAC definitions
- Security engineers designing integrity services that rely on hash-based MACs
- Auditors and evaluators assessing cryptographic compliance and conformance to ISO/IEC standards
Related standards
Keywords: ISO/IEC 9797-2:2021, message authentication codes, MAC, dedicated hash-function, data integrity, KMAC, Keccak, SHA‑256, SM3, RIPEMD, MAC algorithms.
Open preview (PDF)Information security — Message authentication codes (MACs) — Part 2: Mechanisms using a dedicated hash-function