CardGroove
Getting Started Downloads
TOOLS / MESSAGE AUTHENTICATION

AES-CMAC

Authenticate data with a secret key.

AES-128 · RFC 4493 · 128-bit tag. Calculations run locally in your browser.

Enter exactly 16 bytes (32 HEX characters). Spaces are accepted.

Calculator reference

Verification evidence and limitations →

What it calculates

Computes the full AES-128 CMAC authentication tag specified in RFC 4493.

Inputs and methods

16-byte HEX key; HEX or ASCII message, including empty input; maximum 65,536 bytes.

Worked example

Load RFC 4493 Example 1: key 2B7E151628AED2A6ABF7158809CF4F3C; empty message.

BB1D6929E95937287FA37D129B756746

Specification and limits

Full 128-bit tag only. No message encryption, key storage or sender identity validation.

RFC 4493 — The AES-CMAC Algorithm ↗