Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a requirement to implement AES_CMAC as the authentication algorithm in a CMS library. I just can't seem to find the OID and the ASN.1 definition for it.

I expected to see the OID under {joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistAlgorithm(4) aes(1)} since it appears to be a NIST Standard ( 800-38B )

Any help out there? Thanks

share|improve this question
If there was an OID, I'd expect it to be at…, but it seems CMAC is missing. – archie Jul 24 '14 at 20:21
The issue may be that CMS authenticated data is probably not used that much. Would it be an option to specify CCM instead? It uses CBC-MAC underneath, but it is secure and probably more widely supported. – Maarten Bodewes Jul 24 '14 at 20:45
Note: I've searched both the Bouncy Castle libs as well as the OID repository to no avail. – Maarten Bodewes Jul 24 '14 at 20:50
owlstead - No, CCM is not an option. It is not possible to stream parse an authenticated-enveloped-data type with that authentication mode. – Bryan Jul 24 '14 at 20:50

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.