BaselineWatch
Desk

4.2.5 Response Integrity

NIST PIV and digital identity SP 800-73-4
All changes in this version
first version loaded 4 Secure Messaging part of 4.2

Title

Response Integrity

Control

The Response MAC (R-MAC) shall be generated by applying CMAC [SP800-38B] to the data field and status bytes of the response using the SK RMAC session key. An R-MAC shall be generated for each response that corresponds to a command that was sent to the card using secure messaging.

The data to be MACed, M R-MAC , shall be constructed by concatenating the following: