HMAC and Other Stories from the Real World

I will recall some of the stories and lessons of a theoretician wandering in the land of real-world cryptography, with examples (and counter-examples) from the work on HMAC, IPsec and TLS.