BaselineWatch
Desk

4.2.5 Response Integrity

NIST PIV and digital identity SP 800-73-5 against SP 800-73-4
All changes in this version
modified 4 Secure Messaging part of 4.2

Title

Response Integrity

Control changed

Before · SP 800-73-4

The Response MAC (R-MAC) shall be generated by applying CMAC [SP800-38B] to the data field and status bytes of the response using the SK RMAC session key. An R-MAC shall be generated for each response that corresponds to a command that was sent to the card using secure messaging.

The data to be MACed, M R-MAC , shall be constructed by concatenating the following:

After · SP 800-73-5

The Responseresponse MAC (R-MAC) shallSHALL be generated by applying CMAC [SP800-38B] to the data field and status bytes of the response using the SK RMACSKRMAC session key. An R-MAC shallSHALL be generated for each response that corresponds to a command that was sent to the card using secure messaging.

The data to be MACed, M R-MACMR-MAC , shallSHALL be constructed by concatenating the following: