I have a requirement to implement AES_CMAC as the authentication algorithm in a CMS library. I just can't seem to find the OID and the ASN.1 definition for it.

I expected to see the OID under {joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistAlgorithm(4) aes(1)} since it appears to be a NIST Standard ( 800-38B )

Any help out there? Thanks

  • $\begingroup$ If there was an OID, I'd expect it to be at csrc.nist.gov/groups/ST/crypto_apps_infra/csor/…, but it seems CMAC is missing. $\endgroup$ – archie Jul 24 '14 at 20:21
  • $\begingroup$ The issue may be that CMS authenticated data is probably not used that much. Would it be an option to specify CCM instead? It uses CBC-MAC underneath, but it is secure and probably more widely supported. $\endgroup$ – Maarten - reinstate Monica Jul 24 '14 at 20:45
  • $\begingroup$ Note: I've searched both the Bouncy Castle libs as well as the OID repository to no avail. $\endgroup$ – Maarten - reinstate Monica Jul 24 '14 at 20:50
  • $\begingroup$ owlstead - No, CCM is not an option. It is not possible to stream parse an authenticated-enveloped-data type with that authentication mode. $\endgroup$ – Bryan Jul 24 '14 at 20:50

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.