Using Cryptographic Message Syntax (CMS) to Protect Firmware Packages

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 61
Abstract: This document describes the use of the Cryptographic Message Syntax (CMS) to protect firmware packages, which provide object code for one or more hardware module components. CMS is specified in RFC 3852. A digital signature is used to protect the firmware package from undetected modification and to provide data origin authentication. Encryption is optionally used to protect the firmware package from disclosure, and compression is optionally used to reduce the size of the protected firmware package. A firmware package loading receipt can optionally be generated to acknowledge the successful loading of a firmware package. Similarly, a firmware package load error report can optionally be generated to convey the failure to load a firmware package. [STANDARDS-TRACK]
Publication Date: 2005-08-01
Status Note: Proposed Standard
DOI: 10.17487/RFC4108
Link: https://doi.org/10.17487/RFC4108
Author(s): Russ Housley
Keyword(s): Digital Signature

Latest version of IETF RFC 4108

Document Versions — IETF RFC 4108

▶ IETF RFC 4108 (2005-08-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

NIST FIPS 180-1 [Withdrawn]
IETF RFC 2119 [Active*]
IETF RFC 2634 [Active*]
IETF RFC 3274 [Active*]
IETF RFC 3280 [Superseded*]
IETF RFC 3629 [Active*]
IETF RFC 3852 [Superseded*]
T-REC-X.208.1988 — CCITT/ISO88d EXTERNAL
T-REC-X.209.1988 — 5 EXTERNAL
T-REC-X.509.1988 — 4 EXTERNAL

Bibliographic Reference(s)

NIST FIPS 140-2 [Superseded]
NIST FIPS 197 [Superseded]
Goldberg, I. and D. Wagner. "Randomness and the Netscape Browser." Dr. Dobb's Journal, January 1996. EXTERNAL
IETF RFC 2560 [Superseded*]
IETF RFC 3281 [Superseded*]
IETF RFC 3379 [Active*]
IETF RFC 4086 [Active*]
RSA.PKCS6.v1.5.1993 — PKCS6 EXTERNAL
ITU-T X.509 [Superseded]
T-REC-X.509.2000 — X.509-2000 EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC4108.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 4108, Using Cryptographic Message Syntax (CMS) to Protect Firmware Packages. Available at https://doi.org/10.17487/RFC4108

Snippet:

IETF RFC 4108, Using Cryptographic Message Syntax (CMS) to Protect Firmware Packages. Available at https://doi.org/10.17487/RFC4108

HTML (ISO 690 compliant)

Preview:

IETF RFC 4108, Using Cryptographic Message Syntax (CMS) to Protect Firmware Packages. Available at https://doi.org/10.17487/RFC4108

Snippet:

<span class="citation"><cite>IETF RFC 4108</cite>, Using Cryptographic Message Syntax (CMS) to Protect Firmware Packages. Available at <a href="https://doi.org/10.17487/RFC4108" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4108</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 4108, Using Cryptographic Message Syntax (CMS) to Protect Firmware Packages
doi: 10.17487/RFC4108
url: https://doi.org/10.17487/RFC4108

Snippet:

<li>
<cite id="bib-rfc4108">IETF RFC 4108</cite>, Using Cryptographic Message Syntax (CMS) to Protect Firmware Packages
<span class="doi">10.17487/RFC4108</span>
</li>

Referenced By

IETF RFC 5911 [Active*]
IETF RFC 5934 [Active*]
IETF RFC 6010 [Active*]
IETF RFC 6024 [Active*]
IETF RFC 6272 [Active*]
IETF RFC 7030 [Active*]
IETF RFC 7299 [Active*]