MACs are, in principle, also vulnerable against collision attacks. We discuss the issue in the

following.

$$ Assume attacker found a collision between two messages, that is:

MACk$($x$1)=$ MACk$($x$2)$

Show a simple protocol with an attack that is based on a collision.