Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.


The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

The Keyed-Hash Message Authentication Code (HMAC)



Quynh H. Dang


This Standard describes a keyed-hash message authentication code (HMAC), a mechanism for message authentication using cryptographic hash functions. HMAC can be used with any iterative Approved cryptographic hash function, in combination with a shared secret key. [Supersedes FIPS 198 (March 2002):]
Federal Inf. Process. Stds. (NIST FIPS) - 198-1
Report Number


computer security, cryptography, HMAC, MAC, message authentication, Federal Information Processing Standards (FIPS)
Created July 16, 2008, Updated November 10, 2018