Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

I have a requirement to implement AES_CMAC as the authentication algorithm in a CMS library. I just can't seem to find the OID and the ASN.1 definition for it.

I expected to see the OID under {joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistAlgorithm(4) aes(1)} since it appears to be a NIST Standard ( 800-38B )

Any help out there? Thanks

share|improve this question
    
If there was an OID, I'd expect it to be at csrc.nist.gov/groups/ST/crypto_apps_infra/csor/…, but it seems CMAC is missing. –  archie Jul 24 at 20:21
    
The issue may be that CMS authenticated data is probably not used that much. Would it be an option to specify CCM instead? It uses CBC-MAC underneath, but it is secure and probably more widely supported. –  owlstead Jul 24 at 20:45
    
Note: I've searched both the Bouncy Castle libs as well as the OID repository to no avail. –  owlstead Jul 24 at 20:50
    
owlstead - No, CCM is not an option. It is not possible to stream parse an authenticated-enveloped-data type with that authentication mode. –  Bryan Jul 24 at 20:50

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.