Assertion: message | /r/CapableOf | provide same start condition
Facets:
value: to the hash function
type: TRANSITIVE-OBJECT
Source sentences:
text: The alternative, appending the key using MAC = H(message || key), suffers from the problem that an attacker who can find a collision in the (unkeyed) hash function has a collision in the MAC (as two messages m1 and m2 yielding the same hash will provide the same start condition to the hash function before the appended key is hashed, hence the final hash will be the same).