The DOI matches its Crossref record.
Cryptographic Message Syntax (CMS)
Abstract
This document describes the Cryptographic Message Syntax (CMS). This syntax is used to digitally sign, digest, authenticate, or encrypt arbitrary message content.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Citations
Cited by
Items 101–197 of 197
Service for secure and protected applications in Collaborative Learning Environments
Gualberto, T. D. M., & Zorzo, S. D. (2010) · Conference proceedings/Conference proceedings - IEEE International Conference on Systems, Man, and Cybernetics · doi:10.1109/icsmc.2010.5641947 · Cited by 2
Key Update Mechanism in PKI: Study and a New Approach
Spoorthi, V., Rajendran, B., & Chandrasekaran, K. (2013) · doi:10.1109/adcons.2013.52 · Cited by 2
“Upda notify the entities who have acquir old key pair about key replacem structures [7] can be used for upda in RFC 4210.”
BackgroundAttacks on devices using SSL/TLS
Plátěnka, V., Mazalek, A., & Vranova, Z. (2021) · International Conference on Military Technologies · doi:10.1109/icmt52455.2021.9502818 · Cited by 2
Security Analysis of the KNX Smart Building Protocol
Küppers, M., Schuba, M., Neugebauer, G., et al. (2023) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3600160.3605167 · Cited by 2
Public-Key Certificate Management and Use Cases
van Oorschot, P. C. (2020) · Information security and cryptography · doi:10.1007/978-3-030-33649-3_8 · Cited by 2
Sistemas y entornos de pago para la adquisición de contenidos y servicios electrónicos en red
Ruiz‐Martínez, A. (2010) · Tesis Doctorals en Xarxa (Consorci de Serveis Universitaris de Catalunya) · Cited by 2
Plan de signalisation Internet pour l'interfonctionnement entre NAT et Firewall
Aoun, C. (2005) · OpenGrey (Institut de l'Information Scientifique et Technique) · Cited by 2
Towards e-Government: The security SOA approach of the University of Murcia
Sanchez-Martinez, D., Marín‐López, I., Skármeta, A., et al. (2008) · International Conference on Digital Information Management · doi:10.1109/icdim.2008.4746840 · Cited by 2
“…defined in [5] by the OASIS’s Digital Signature Services Technical Committee, which supports different signature formats, such as XMLDSig [6], CMS [7], XAdES [8], CAdES, etc. Additionally, for timestamp purposes, a new profile we have defined, called UMU-TS, based on the OASIS DSS timestamp…”
MethodIdentity-Based Cryptosystems for Enhanced Deployment of OSGi Bundles
Parrend, P., Galice, S., Frénot, S., et al. (2007) · doi:10.1109/secureware.2007.4385333 · Cited by 2
“Into the bargain, the absence of a public key certificate makes the CMS format [7] obsolete.”
BackgroundFTP Transport for Secure Peer-to-Peer Business Data Interchange over the Internet
Harding, T., & Scott, R. (2007) · doi:10.17487/rfc4823 · Cited by 2
Securing X.400 Content with Secure/Multipurpose Internet Mail Extensions (S/MIME)
Hoffman, P., Bonatti, C., & Eggen, A. (2004) · doi:10.17487/rfc3854 · Cited by 2
A Secure Update Mechanism for Internet of Things Devices
Goldberg, M. (2016) · doi:10.1002/9781119193784.ch3 · Cited by 2
Strong Electronic Identification: Survey & Scenario Planning
Agbede, O. (2018) · Aaltodoc (Aalto University) · Cited by 2
Identification and Confidentiality for E-Government
Posch, R., & Leitold, H. (2003) · IFIP advances in information and communication technology · doi:10.1007/978-0-387-35696-9_17 · Cited by 1
Analysis of Cryptographic Protection of the Bitcoin Core Cryptographic Wallet
Sem’yanov, P. V., & Grezina, S. V. (2023) · Automatic Control and Computer Sciences · doi:10.3103/s0146411623080278 · Cited by 1
Standard-Compliant Blockchain Anchoring for Timestamp Tokens
Brînzea, A., Leancă, R.-A., Aciobăniţei, I., et al. (2025) · Applied Sciences · doi:10.3390/app152312722 · Cited by 1
Certification Paths: Retrieval and Validation
Buchmann, J. A., Karatsiolis, E., & Wiesmaier, A. (2013) · Springer eBooks · doi:10.1007/978-3-642-40657-7_9 · Cited by 1
Reha-Sports: The Challenge of Small Margin Healthcare Accounting
Doedt, M., Göke, T., Pardo, J., et al. (2012) · Lecture notes in computer science · doi:10.1007/978-3-642-34032-1_10 · Cited by 1
Rubio, Ó. J., Alesanco, Á., & García, J. (2014) · IEEE-EMBS International Conference on Biomedical and Health Informatics (BHI ...) · doi:10.1109/bhi.2014.6864346 · Cited by 1
SIP-Based IM and Its Security Solutions
Cui, X., Zhang, Y., Lee, W. J., et al. (2010) · doi:10.1109/wicom.2010.5601309 · Cited by 1
“The S/MIME algorithms are set by RFC 3369 [5], which is derived from RFC 2315.”
MethodEggert, L., & Fairhurst, G. (2008) · Cited by 1
In Certificates We Trust -- Revisited
Reimair, F., Teufl, P., & Prünster, B. (2015) · Trust, Security And Privacy In Computing And Communications · doi:10.1109/trustcom-bigdatase-ispa.2015.437 · Cited by 1
Computationally Efficient ID-Based Blind Signature Scheme in E-Voting
Jain, R. T., & Patel, A. A. (2013) · IJSRD : international journal for scientific research and development · Cited by 1
Towards a Modular Architecture for Adaptable Signature-verification Tools
Lenz, T., Stranacher, K., & Zefferer, T. (2013) · International Conference on Web Information Systems and Technologies · doi:10.5220/0004356303250334 · Cited by 1
Schwenk, J. (2022) · Information security and cryptography · doi:10.1007/978-3-031-19439-9_17 · Cited by 1
Digital Signatures with Outsourced Hashing
Poettering, B., & Rastikian, S. (2024) · Lecture notes in computer science · doi:10.1007/978-981-96-0888-1_5 · Cited by 1
Toward a Distributed and Autonomous DTN Security Environment
Sipos, B. (2024) · IEEE International Conference on Space Mission Challenges for Information Technology · doi:10.1109/smc-it61443.2024.00026 · Cited by 1
“Current terrestrial over-the-air re-keying (OTAR) capabilities use the cryptographic message syntax (CMS) [37] and its extensions, based on ASN.1 and DER, to envelope and encrypt private key material and systems like the Secure Object Delivery Protocol (SODP) [38] to transport those enveloped data…”
Fahrnberger, G. (2019) · Communications in computer and information science · doi:10.1007/978-3-030-37484-6_8 · Cited by 1
Enhancing the Modularity and Applicability of Web-Based Signature-Verification Tools
Lenz, T., Stranacher, K., & Zefferer, T. (2014) · Lecture notes in business information processing · doi:10.1007/978-3-662-44300-2_11 · Cited by 1
The Value of User-Visible Internet CryptographyPreprint
Brooke, P. J., & Paige, R. F. (2013) · arXiv (Cornell University) · doi:10.48550/arxiv.1303.1948 · Cited by 1
“CMS or Cryptographic Message Syntax, based on PKCS#7, is described by RFC5652 (Housley, 2009) and describes a message format for cryptographic messages.”
BackgroundDomainKeys Identified Mail Demonstrates Good Reasons to Re-invent the Wheel
Farrell, S. (2006) · Lecture notes in computer science · doi:10.1007/11774716_12 · Cited by 1
Using Web Services Technology for Inter-enterprise Integration of Digital Time Stamping
Cilardo, A., Mazzeo, A., Romano, L., et al. (2003) · Lecture notes in computer science · doi:10.1007/978-3-540-39962-9_93 · Cited by 1
Blinov, M., & Adams, C. M. (2005) · doi:10.17487/rfc4212 · Cited by 1
Reducing PKI related network load in bandwidth constrained environments
Fedorchak, B. (2008) · IEEE Military Communications Conference (MILCOM) · doi:10.1109/milcom.2008.4753317 · Cited by 1
Authentication-Results Registration for S/MIME Signature Verification
Melnikov, A. (2014) · doi:10.17487/rfc7281 · Cited by 1
Object Identifier Registry for the S/MIME Mail Security Working Group
Housley, R. (2014) · doi:10.17487/rfc7107 · Cited by 1
Self-citationDuplication Grouping Semantics in the Session Description Protocol
Begen, A. C., Cai, Y., & Ou, H. (2014) · doi:10.17487/rfc7104 · Cited by 1
Archived NIST Technical Series Publication
Barker, E. B., & Dang, Q. H. (2015) · Cited by 1
Design and implementation of a trusted third-party based cross-realm AAA system
Zrelli, S. (2006) · Cited by 1
Derived PIV Application and Data Model Test Guidelines
Cooper, D. A., Ferraiolo, H., Chandramouli, R., et al. (2016) · doi:10.6028/nist.sp.800-166 · Cited by 1
Chaining up Time: Bitcoin and Long-Term Validity of PKI Timestamp TokensPreprint
Cisbani, E. (2021) · SSRN Electronic Journal · doi:10.2139/ssrn.3743330 · Cited by 1
Long-term Retention in E-Voting – Legal Requirements and Technical Implementation
Gitter, R., Langer, L., Okunick, S., et al. (2008) · Cited by 1
Optimizing secure communication standards for disadvantaged networks
Okano, S. H., Khazan, R. I., Cooley, J. A., et al. (2009) · DSpace@MIT (Massachusetts Institute of Technology)
A web services based architecture for digital time stamping
Cilardo, A., Mazzeo, A., Romano, L., et al. (2003)
SIPEX: uma proposta de modelo de política de assinatura.
Fernandes, M. R. (2006) · doi:10.11606/d.3.2006.tde-08032007-174733
Hajjeh, I. (2003) · HAL (Le Centre pour la Communication Scientifique Directe)
Newspeak: A Secure Approach for Designing Web Applications
Dent, K., & Bellovin, S. M. (2008) · doi:10.7916/d8hh6sz6
“S-HTTP is, in essence, a Cryptographic Message Syntax (CMS) encoding of encrypted text [10].”
BackgroundNotification Services for the Server-Based Certificate Validation Protocol
Buchmann, J. A., & Karatsiolis, V. (2009) · International Journal of Communications Network and System Sciences · doi:10.4236/ijcns.2009.25042
Oasis Digital Signature Services: Digital Signing without the Headaches
Pope, N., & Cruellas, J. C. (2006) · IEEE Internet Computing · doi:10.1109/mic.2006.108
MODÈLE DYNAMIQUE DE SÉCURITÉ POUR RÉSEAUX SPONTANÉS
Galice, S. (2007) · OpenGrey (Institut de l'Information Scientifique et Technique)
Secure Documents Sharing System for Cloud Environments
Abolafya, N. (2012) · KTH Publication Database DiVA (KTH Royal Institute of Technology)
The security properties of in-network aggression
Jónsson, K. V. (2013) · KTH Publication Database DiVA (KTH Royal Institute of Technology)
Updates and Asynchronous Communication in Trusted Computing Systems
Brustoloni, J. C., & Kyle, D. (2008) · IEEE International Conference on Distributed Computing Systems (ICDCS) · doi:10.1109/icdcs.2008.109
A High Performance Software Architecture for a Secure Internet Routing PKI
Reynolds, M. C., & Kent, S. (2009) · doi:10.1109/catch.2009.17
“R. Housley, “Cryptographic Message Syntax (CMS)”, RFC 3852 (2004) 17. http://ietfreport.isoc.org/ids/draft-ietf-sidr-roa-format03.txt 18.”
MethodInfluentialTrustedBird, un client de messagerie de confiance
Cailleux, L. (2009)
Schönwälder, J. (2010)
A NAT and Firewall signaling framework for the Internet
Aoun, C. (2005)
Guidelines for Optional Services for Internet Fax Gateways
Mimura, K., Yokoyama, K., Satoh, T., et al. (2005) · doi:10.17487/rfc4161
Session Initiation Protocol (SIP) Extension for Instant Messaging Status of this Memo
Rosenberg, J. M., Schulzrinne, H. G., Huitema, C., et al. (2002)
Elektronische Signaturen in der Telematikinfrastruktur
Hallof, A., Koch, M., Marx, S., et al. (2012) · GI-Jahrestagung
Foreign Identities in the Austrian E-Government - An Interoperable eID Solution.
Ivkovic, M., & Stranacher, K. (2010)
Secure and Compact Image-Based Storage Format for DICOM Multiframe Echocardiogram Video
Alesanco, Á., Rubio, Ó. J., Cavero, E., et al. (2016) · World Congress on Medical Physics and Biomedical Engineering, September 7 - 12, 2009, Munich, Germany · doi:10.1007/978-3-319-32703-7_218
NSA's Cryptographic Message Syntax (CMS) Key Management Attributes
Timmel, P., Housley, R., & Turner, S. (2016) · doi:10.17487/rfc7906
Self-citationCryptography in Electronic Mail
Rafiee, H., von Löwis, M., & Meinel, C. (2013) · Advances in information security, privacy, and ethics book series · doi:10.4018/978-1-4666-4030-6.ch016
Offline time-stamping system: Its design and implementation
Kakei, S., Mohri, M., Shiraishi, Y., et al. (2012) · IEEE International Conference on Control System, Computing and Engineering · doi:10.1109/iccsce.2012.6487179
“TKMA has one module: “Terminal Information Management Module” stores an AIK certificate, a SK certificate, and a terminal identifier and pulls these certificates corresponding the identifier.”
BackgroundRehasport: The Challenge of Small Margin Healthcare Accounting
Doedt, M., Göke, T., Pardo, J., et al. (2016) · Communications in computer and information science · doi:10.1007/978-3-319-51641-7_1
Schönwälder, J. (2012)
Schönwälder, J. (2011)
Towards Secure Electronic Workflows Examples of Applied {PKI}
Fritsch, S. (2006)
Policy-Driven System Management
Plate, H., Basile, C., & Paraboschi, S. (2013) · Elsevier eBooks · doi:10.1016/b978-0-12-803843-7.00026-0
Hash-Based Server-Assisted Digital Signature Solutions
Truu, A. (2020) · TUTL Collection · doi:10.23658/taltech.11/2020
A Content Dictionary for In-Object Comments
Hellström, L. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-52200-1_47
Brooks, T. T. (2016) · Wiley eBooks · doi:10.1002/9781119193784.biblio
Die Bedeutung von PKI – Gestern, Heute und Morgen
Fiedler, A., Giessmann, E.-G., & Nguyen, K. (2022) · Datenschutz und Datensicherheit - DuD · doi:10.1007/s11623-022-1589-4
Public-Key Certificate Management and Use Cases
van Oorschot, P. C. (2021) · Information security and cryptography · doi:10.1007/978-3-030-83411-1_8
Housley, R. (2021) · Springer eBooks · doi:10.1007/978-3-642-27739-9_96-2
Self-citationKappes, M. (2022) · Springer eBooks · doi:10.1007/978-3-658-16127-9_13
Novel architectures and strategies for security offloading
Banegas, D. T. M. (2017) · doi:10.5821/dissertation-2117-114622
ECDSA Certificate Enrollment and Authentication for SCEP Protocol in Smart Grid PKI
Hsu, D.-W., Chen, H.-T., Sun, H., et al. (2023) · Smart innovation, systems and technologies · doi:10.1007/978-981-99-0605-5_26
Interfaces for Personal Identity Verification:
Ferraiolo, H., Mehta, K., Francomacaro, S., et al. (2023) · doi:10.6028/nist.sp.800-73pt1-5.ipd
RetractedHousley, R. (2025) · Springer eBooks · doi:10.1007/978-3-030-71522-9_96
Self-citationA comparison between cryptography libraries used in BRSKI protocol for constrained devices
Ehlert, R. R., Soares, L. R., & Nobre, J. C. (2025) · doi:10.5753/sbseg.2025.11472
“The process of digitally signing the voucher is done using CMS (Cryptographic Message Syntax)(Housley 2009), which is a standard syntax for storing signed data, using a X.509 certificate.”
Secure Network Tunnel for Distributed Systems Founded on Cryptographic Message Syntax
Asratian, R. (2025) · doi:10.1109/mlsd65526.2025.11220732
“It describes a data structure that is a kind of secure "container" for storing electronic documents, providing authentication and confidentiality of data [6].”
Hühnlein, D. (2005) · Sicherheit
Fuß, J., & Vymazal, A. (2025) · Springer eBooks · doi:10.1007/978-3-662-70845-3_5
KeyBlob: A Standardized Format for Secure HSM Key Transport and Storage
Gingupalli, S. C. P. (2025) · IEEE International Conference on Cryptography, Informatics, and Cybersecurity (ICoCICs) · doi:10.1109/icocics68032.2025.11384050
“By embedding this chain within a CMS envelope [5], with the KeyBlob data signed using the PAC key, we establish verifiable origin authenticity, securely binding the KeyBlob’s provenance to the HSM and partition.”
InfluentialIntegrating PQC in OpenSSL via Shallow Providers for Cryptographic Agility
Mehmood, A., & Tuveri, N. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-14782-0_2
“…for PKIX and SMIME (LAMPS) WG maintains protocols, formats, and extensions concerning certificates and authentication, and play a pivotal role in improving Public Key Infrastructures (PKIs), particularly in relation to S/MIME [56], CMS [19], and Public Key Infrastructure (X.509) (PKIX) [11].”
Redefining Digital Web Signature Secrecy: A Client-Side Model for Enhanced Security and Compliance
Silvano, W. F., Mayr, L., Brum, E., et al. (2026) · Journal of the Brazilian Computer Society · doi:10.5753/jbcs.2026.5556
“Finally, as denoted by Housley [2009], a CMS is created containing the certificate chain, the digest calculated previously, and the signing time 4 .”
Ieva, S., Fasciano, C., Pinto, A., et al. (2026) · Applied Sciences · doi:10.3390/app16136697
Scaling of Memory and Bandwidth Requirements of Post-quantum Signatures with Message Size
Strenzke, F. (2026) · Communications in computer and information science · doi:10.1007/978-3-032-28946-9_6
Doynov, R., Nenova, M., Todovichin, G., et al. (2026) · Cryptography · doi:10.3390/cryptography10050070
Certification Service Provider
Buchmann, J. A., Karatsiolis, E., & Wiesmaier, A. (2013) · Springer eBooks · doi:10.1007/978-3-642-40657-7_7
Analysis and Amend Online Certificate Service Protocols
Deng, X., Yang, G., Wen, Z., et al. (2011) · Lecture notes in electrical engineering · doi:10.1007/978-3-642-19712-3_38
“Its complete definition makes reference to [8].”
Metadata
- Authors
- Housley, R.
- Corresponding author
- Housley, R.
- Publisher
- RFC Editor
- Published
- 2009-09
- OpenAlex
- W2270964349
- Semantic Scholar
- 80a7ab06e0a5325a6a0b584d34e0134cb6667fde
- Cited by
- 196
- References
- 0
- Citations by year
- 2026: 5 · 2025: 6 · 2024: 4 · 2023: 7 · 2022: 6 · 2021: 7 · 2020: 6 · 2019: 4 · 2018: 4 · 2017: 6 · 2016: 14 · 2015: 6 · 2014: 10 · 2013: 15 · 2012: 11
- Type
- report
- Language
- en
- Open access
- closed
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Cryptographic Implementations and Security
- Physical Sciences › Computer Science › Computer Networks and Communications › Cryptography and Data Security
- Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
- Keywords
- Cryptographic Message Syntax, CMS, digital signatures, message authentication, message encryption, ASN.1
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
