BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

4.2.3 Command Integrity

NIST PIV and digital identity SP 800-73-5 against SP 800-73-4
All changes in this version
modified 4 Secure Messaging part of 4.2

Title

Command Integrity

Control changed

Before · SP 800-73-4

The Command MAC (C-MAC) shall be generated by applying the cipher-based MAC (CMAC) [SP800-38B] to the header and data field of a command using the SK MAC session key. In the case that fragmentation is required for data transmission, the command shall be constructed without fragmentation for the purposes of computing the MAC, and the CLA byte used in the computation of the MAC shall be '0C'.

The data to be MACed, M C-MAC , shall be constructed by concatenating the following:

After · SP 800-73-5

The Command MAC (C-MAC) shallSHALL be generated by applying the cipher-based MAC (CMAC) [SP800-38B] to the header and data field of a command using the SK MACSKMAC session key. In the case thatIf fragmentation is required for data transmission, the command shallSHALL be constructed without fragmentation for the purposes of computing the MAC, and the CLA byte used in the computation of the MAC shallSHALL be '0C'.

The data to be MACed, M C-MACMC-MAC , shallSHALL be constructed by concatenating the following: