• Let I = (S,V) be a MAC.
• Suppose S(k,m) is always 5 bits long
• Can this MAC be secure?
• No, an attacker can simply guess the tag for messages
• It depends on the details of the MAC
• Yes, the attacker cannot generate a valid tag for
any message