Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Algorithm Validation Program CAVP

CAVP Testing: Keyed-Hash Message Authentication Code (HMAC)

Algorithm Specifications

Algorithm information is available from the Cryptographic Toolkit page.


Algorithm Validation Testing Requirements

The algorithm validation testing requirements for FIPS 198-1 are specified in:

The Keyed-Hash Message Authentication Code (HMAC) Validation System (HMACVS).

Testing Notes


Test Vectors

Use of these test vectors does not replace validation obtained through the CAVP.

The test vectors linked below can be used to informally verify the correctness of a HMAC algorithm listed above.

HMAC Test Vectors

Created October 05, 2016, Updated March 16, 2023