7.1.4 Card Authentication Key (CAK) Authentication
NIST PIV and digital identity SP 800-116 Rev. 1 against SP 800-116
All changes in this version
All changes in this version
Title changed
Before · SP 800-116
Card Authentication Key (CAK) Authentication
After · SP 800-116 Rev. 1
Card Authentication Key (CAK) Authentication
Control changed
Before · SP 800-116
The CAK is an optional key that may be present on any PIV Card. As the name implies, the purpose of the CAK authentication mechanism is to authenticate the card and therefore its possessor. The CAK is unique among the PIV keys in several respects:
After · SP 800-116 Rev. 1
The CAK is an optional key that may be present on any PIV Card. As the name implies, the purpose of the CAK authentication mechanism is to authenticate the card and therefore its possessor. The CAK is unique among the PIV keys in several respects: