RFC 6211: Cryptographic Message Syntax (CMS) Algorithm Identifier Protection Attribute

The Cryptographic Message Syntax (CMS), unlike X.509/PKIX certificates, is vulnerable to algorithm substitution attacks. In an algorithm substitution attack,…

Read RFC 6211 on the RFC Editor

Outgoing relationships (10 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5652: Cryptographic Message Syntax (CMS)
Normative reference — RFC 5912: New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX)
Normative reference — RFC 2634: Enhanced Security Services for S/MIME
Normative reference — RFC 5035: Enhanced Security Services (ESS) Update: Adding CertID Algorithm Agility
Informative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Informative reference — RFC 3447: Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.1
Informative reference — RFC 3370: Cryptographic Message Syntax (CMS) Algorithms
Informative reference — RFC 4056: Use of the RSASSA-PSS Signature Algorithm in Cryptographic Message Syntax (CMS)
Informative reference — RFC 6210: Experiment: Hash Functions with Parameters in the Cryptographic Message Syntax (CMS) and S/MIME

Incoming relationships (5 related RFCs)

Normatively referenced by — RFC 8933: Update to the Cryptographic Message Syntax (CMS) for Algorithm Identifier Protection
Normatively referenced by — RFC 9882: Use of the ML-DSA Signature Algorithm in the Cryptographic Message Syntax (CMS)
Informatively referenced by — RFC 7515: JSON Web Signature (JWS)
Informatively referenced by — RFC 9530: Digest Fields
Informatively referenced by — RFC 7107: Object Identifier Registry for the S/MIME Mail Security Working Group