Cryptographic Message Syntax (CMS) Algorithm Identifier Protection Attribute

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 11
Abstract: The Cryptographic Message Syntax (CMS), unlike X.509/PKIX certificates, is vulnerable to algorithm substitution attacks. In an algorithm substitution attack, the attacker changes either the algorithm being used or the parameters of the algorithm in order to change the result of a signature verification process. In X.509 certificates, the signature algorithm is protected because it is duplicated in the TBSCertificate.signature field with the proviso that the validator is to compare both fields as part of the signature validation process. This document defines a new attribute that contains a copy of the relevant algorithm identifiers so that they are protected by the signature or authentication process. [STANDARDS-TRACK]
Publication Date: 2011-04-01
Status Note: Proposed Standard
DOI: 10.17487/RFC6211
Link: https://doi.org/10.17487/RFC6211
Author(s): Jim Schaad
Keyword(s): S/MIME

Latest version of IETF RFC 6211

Document Versions — IETF RFC 6211

▶ IETF RFC 6211 (2011-04-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 2634 [Active*]
IETF RFC 5035 [Active*]
IETF RFC 5652 [Active*]
IETF RFC 5912 [Active*]
T-REC-X.680.2008 — ASN.1-2008 EXTERNAL

Bibliographic Reference(s)

Halevi, S. and H. Krawczyk, "Strengthening Digital Signatures via Random Hashing", January 2007, < http://webee.technion.ac.il/~hugo/rhash/rhash.pdf >. EXTERNAL
IETF RFC 3370 [Active*]
IETF RFC 3447 [Superseded*]
IETF RFC 4056 [Active*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 6210 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC6211.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 6211, Cryptographic Message Syntax (CMS) Algorithm Identifier Protection Attribute. Available at https://doi.org/10.17487/RFC6211

Snippet:

IETF RFC 6211, Cryptographic Message Syntax (CMS) Algorithm Identifier Protection Attribute. Available at https://doi.org/10.17487/RFC6211

HTML (ISO 690 compliant)

Preview:

IETF RFC 6211, Cryptographic Message Syntax (CMS) Algorithm Identifier Protection Attribute. Available at https://doi.org/10.17487/RFC6211

Snippet:

<span class="citation"><cite>IETF RFC 6211</cite>, Cryptographic Message Syntax (CMS) Algorithm Identifier Protection Attribute. Available at <a href="https://doi.org/10.17487/RFC6211" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6211</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 6211, Cryptographic Message Syntax (CMS) Algorithm Identifier Protection Attribute
doi: 10.17487/RFC6211
url: https://doi.org/10.17487/RFC6211

Snippet:

<li>
<cite id="bib-rfc6211">IETF RFC 6211</cite>, Cryptographic Message Syntax (CMS) Algorithm Identifier Protection Attribute
<span class="doi">10.17487/RFC6211</span>
</li>

Referenced By

IETF RFC 7515 [Active*]
IETF RFC 8933 [Active*]