Which keyed hash and MAC constructions are evaluated?

The tool audits HMAC (SHA-256, SHA-512, SHA3-256, SHA3-512), keyed BLAKE2s/BLAKE2b, BLAKE3 keyed hashing, KMAC128/KMAC256, and Poly1305.

Why are BLAKE3 or Poly1305 marked as skipped in my report?

BLAKE3 keyed hashing and Poly1305 strictly mandate a 32-byte (256-bit) key and will not execute with keys of other lengths.

How are cryptographic security levels calculated?

Security levels follow NIST SP 800-107 (min of key bits and hash output), NIST SP 800-185 for KMAC, and RFC 8439 for Poly1305 bounds.

What happens when tag length is truncated?

The tag is shortened to the requested byte count and the linter calculates the reduced forgery resistance bound, issuing warnings if kept bits fall below 128.

What is the custom label field used for?

The custom label sets the KMAC customization string and the BLAKE3 context string for domain separation and subkey derivation.

Elysia Tools

Navigation

Cryptography

HMAC + BLAKE3 + SHA-3/Keccak + Poly1305 + BLAKE2 Keyed MAC Construction Linter

Compute and audit MACs across HMAC-SHA-2/SHA-3, keyed BLAKE2, BLAKE3, KMAC and Poly1305 with official known-answer self-tests, key/tag-length linting and a cross-construction compatibility matrix.

Details

What this tool helps you do

Every tag is produced by a verified implementation: HMAC uses OpenSSL via node:crypto; BLAKE2/BLAKE3/KMAC/Poly1305 run as pure TypeScript checked against the official BLAKE2 KAT, BLAKE3 test vectors, NIST SP 800-185 KMAC samples, RFC 8439 §2.5.2 and FIPS 202. Security levels follow NIST SP 800-107 (HMAC strength = min(key bits, hash output bits), forgery bound 2^(t/2) for a kept tag of t bits), SP 800-185 (KMAC = min(key, 2·tag, c/2 bits)) and RFC 8439 (Poly1305 one-time, ≤ 8⌈L/16⌉/2^106).

Execution

Run this tool

Fill in the form, run the tool, and review the result in one place.

Samples

HMAC + BLAKE3 + SHA-3/Keccak + Poly1305 + BLAKE2 Keyed MAC Construction Linter

What this tool helps you do

Run this tool

Examples that match this tool

Continue with connected tools and hubs

Learn when to use this tool, what it supports, and how real users apply it.

Key facts

Overview

When to use

How it works

Use cases

Examples

1. Full Construction Audit with 32-Byte Key

2. Truncation Linting on Legacy 20-Byte Key

FAQ

MAC Address Samples

Copyright-Free MP3 Audio Samples

Android Image Processing Java Samples

Android Image Processing Kotlin Samples

Hash Algorithm Comparator

Text Hash Generator

BLS Boneh–Lynn–Shacham Threshold Signature Aggregation + Distributed Key Generation Simulator

OAuth 2.0 / OIDC Authorization Code with PKCE Flow Visualizer