Another post on this topic, with links to research papers: <a href="http://rdist.root.org/2009/10/29/stop-using-unsafe-keyed-hashes-use-hmac/" rel="nofollow">http://rdist.root.org/2009/10/29/stop-using-unsafe-keyed-has...</a>