4.2.5 Response Integrity
NIST PIV and digital identity SP 800-73-4
All changes in this version
All changes in this version
Title
Response Integrity
Control
The Response MAC (R-MAC) shall be generated by applying CMAC [SP800-38B] to the data field and status bytes of the response using the SK RMAC session key. An R-MAC shall be generated for each response that corresponds to a command that was sent to the card using secure messaging.
The data to be MACed, M R-MAC , shall be constructed by concatenating the following: