Why can't we use the first block of AES-CBC as MAC As per topic, why can't we use the first block as MAC instead of using the last block? what's the rationale?
The MAC value should be calculated over all of the input, not just the first block. The chaining of CBC makes sure that the bits in the last block of ciphertext depends on all the previous blocks.