CycloneDX / CycloneDX/specification
[Defect]: CMAC missing key length
Open
cap: cryptography-registry
defect
- Dominant language
- XSLT
- Stars
- 547
- Forks
- 93
- Avg merge
- 7h 11m
- Merged PRs (30d)
- 37
Description
## Describe the defect
In the cryptography registry, CMAC is defined as `CMAC[-{cipherAlgorithm}][-{length}]`. It does not explicitly list the key length (which could be 128, 192, or 256).
## Additional context
Presumably `length` is supposed to be the MAC length, so I did not consider that to be the key length.
Contributor guide
Assessment
This issue has not been assessed yet.