Jump to content

Cryptographic Message Syntax

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by Itz.mas10 (talk | contribs) at 14:43, 23 December 2024 (Norms and Standards). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

The Cryptographic Message Syntax (CMS) is the IETF's standard for cryptographically protected messages. It can be used by cryptographic schemes and protocols to digitally sign, digest, authenticate or encrypt any form of digital data.

CMS is based on the syntax of PKCS #7, which in turn is based on the Privacy-Enhanced Mail standard. The newest version of CMS (as of 2024) is specified in RFC 5652 (but also see RFC 5911 for updated ASN.1 modules conforming to ASN.1 2002 and RFC 8933 and RFC 9629 for updates to the standard).

The architecture of CMS is built around certificate-based key management, such as the profile defined by the PKIX working group.

CMS is used as the key cryptographic component of many other cryptographic standards, such as S/MIME, PKCS #12 and the RFC 3161 digital timestamping protocol.

OpenSSL is open source software that can encrypt, decrypt, sign and verify, compress and uncompress CMS documents, using the openssl-cms command.

Norms and Standards

Cryptographic Message Syntax (CMS) is regularly updated to address evolving security needs and emerging cryptographic algorithms. As threats and technological advancements continue to shape the landscape of secure communications, CMS undergoes revisions to enhance its robustness, incorporate new cryptographic techniques, and maintain compatibility with modern security standards.

See also