Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-38B

Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication

Date Published: May 2005 (Updated 10/6/2016)

Supersedes: SP 800-38B (05/01/2005)


Morris Dworkin (NIST)



authentication; block cipher; cryptography; information security; integrity; message authentication code; mode of operation.
Control Families

System and Communications Protection


Download URL

Supplemental Material:
None available

Publication Parts:
SP 800-38A
SP 800-38A
SP 800-38C
SP 800-38D
SP 800-38E
SP 800-38F
SP 800-38G

Document History:
10/06/16: SP 800-38B (Final)


Security and Privacy

authentication, cryptography