Why it matters
Encryption hides data, but it does not stop anyone changing it. A message authentication code (MAC) proves that a message comes from someone holding the key and was not altered on the way:
- an amount changed in transit;
- a response code flipped from 05 to 00;
- a replayed approval.
These are the attacks a MAC stops. Terminal–host and host–host links carry one in field 64 or 128.