BaselineWatch
Desk

4.2.5 Response Integrity

NIST PIV and digital identity SP 800-73-5 against SP 800-73-4
All changes in this version
removed 4 Secure Messaging part of 4.2

Title changed

Before · SP 800-73-4

Response Integrity

After · SP 800-73-5

Response Integrity

Control changed

Before · SP 800-73-4

The Response MAC (R-MAC) shall be generated by applying CMAC [SP800-38B] to the data field and status bytes of the response using the SK RMAC session key. An R-MAC shall be generated for each response that corresponds to a command that was sent to the card using secure messaging.

The data to be MACed, M R-MAC , shall be constructed by concatenating the following:

After · SP 800-73-5

The Response MAC (R-MAC) shall be generated by applying CMAC [SP800-38B] to the data field and status bytes of the response using the SK RMAC session key. An R-MAC shall be generated for each response that corresponds to a command that was sent to the card using secure messaging.

The data to be MACed, M R-MAC , shall be constructed by concatenating the following: