Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

The Keyed-Hash Message Authentication Code (HMAC)

Published

Author(s)

Quynh H. Dang

Abstract

This Standard describes a keyed-hash message authentication code (HMAC), a mechanism for message authentication using cryptographic hash functions. HMAC can be used with any iterative Approved cryptographic hash function, in combination with a shared secret key. [Supersedes FIPS 198 (March 2002): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=901425]
Citation
Federal Inf. Process. Stds. (NIST FIPS) - 198-1
Report Number
198-1

Keywords

computer security, cryptography, HMAC, MAC, message authentication, Federal Information Processing Standards (FIPS)
Created July 16, 2008, Updated November 10, 2018