BaselineWatch
Desk

4.2.3 Command Integrity

NIST PIV and digital identity SP 800-73-4
All changes in this version
first version loaded 4 Secure Messaging part of 4.2

Title

Command Integrity

Control

The Command MAC (C-MAC) shall be generated by applying the cipher-based MAC (CMAC) [SP800-38B] to the header and data field of a command using the SK MAC session key. In the case that fragmentation is required for data transmission, the command shall be constructed without fragmentation for the purposes of computing the MAC, and the CLA byte used in the computation of the MAC shall be '0C'.

The data to be MACed, M C-MAC , shall be constructed by concatenating the following: