C.I.E – Carta di Identità Elettronica Functional Specification Version 2.0

More documents

Recommendations

Info

PIN value: "1234"ByteString: "31h32h33h34hFFhFFhFFhFFh" (N=8)For Key objects: the value of the key component, or the value of the key itself.For LOGICAL objects: A 2 operand logical operation in RPN, with the format: || || where is a valid BSO ID (from 01h to 1Fh) = 00h for AND or FFh for ORFor the security condition associated to a LOGICAL object to be VERIFIED, the result of thelogical condition must hold true. This allows to have complex security checks, such as "ExternalAuthenticate AND PIN"Value Description00h01h10h20h21hFirst or only key component for Authentication (TEST object)Second key component for Authentication (TEST object)Secure Messaging key (SM object)First or only key component for Encryption, Decryption and Digital Signature (PSO object)Second key component for Encryption, Decryption and Digital Signature (PSO object)Table 10: BSO CLASS byte codingIn the table above the first component of a RSA key is always the modulus, while the second one isalways the exponent.In each DF, CLASS+ID univocally identifies a BSO. For example: there can be only one TESTBSO (CLASS 00h) with ID 01h under the MF.BSO TYPERSA private key Exponent for ENC/DEC and DSOPTION Byte Value02hPINLOGICALRSA private key Modulus for ENC/DEC and DS22hCIE - Functional Specification v 2.0 -Page 30/76
RSA public key Exponent for AuthenticationRSA public key Modulus for Ext. Authentication3DES key for Ext. Authentication, SM and ENC/DEC01h21h83hTable 11: OPTION byte codingBSO Type Algorithm Algorithm byte valueRSA private key for ENC/DEC RSA_PURE (padded leading 0) 0ChRSA private key for DSRSA public key for EXT. AUTH.3DES key for ENC/DEC3DES key for SM ENC3DES key for EXT. AUTH.3DES key for SM SIGRSA3DES CBC3DES (auth)MAC3 (SM)88h03h82hPIN Secure Verify 87hLOGICAL Logical AND/OR 7FhTable 12: Algorithm byte codingByte Nr. Access Condition Protected CommandVERIFYPSO_CDS1 AC_USEPSO_DECPSO_ENCEXTERNAL AUTHENTICATION2 AC_CHANGECHANGE REFERENCE DATACHANGE KEY DATA3 AC_UNBLOCK RESET RETRY COUNTERCIE - Functional Specification v 2.0 -Page 31/76
Page 1 and 2: C.I.E. - Carta di Identità Elettro
Page 3 and 4: Table of Contents1. Revision Histor
Page 5 and 6: 12.17 GENERATE KEY PAIR ...........
Page 7 and 8: 2. IntroductionThis document is the
Page 9 and 10: 4. Reference Documents1. ISO/IEC 78
Page 11 and 12: Public Key - That key of an entity
Page 13 and 14: lsbLSBMACMFmsbMSBMSEMTSCOSOCIPINPPP
Page 15 and 16: 6. Electrical ParametersFor all ele
Page 17 and 18: 8. Answer To Reset (ATR)The Answer
Page 19 and 20: XXh XXh H5/H6 Y02h H7 Y49h H8 Y54h
Page 21 and 22: 9. Application SelectionNo explicit
Page 23 and 24: Record structure:The EF is seen at
Page 25 and 26: Linear Variable TLV or Cyclic EFSiz
Page 27 and 28: The card maintains an internal Secu
Page 29: BSO ID 1 01h to 1FhOPTION 1 See Tab
Page 33 and 34: 11.4 Secure MessagingThe Secure Mes
Page 35 and 36: Byte Nr. SM Condition1 ENC USE IN2
Page 37 and 38: • Step 4: APDU command set up in
Page 39 and 40: 11.4.5 SM Response in SM_ENCOrigina
Page 41 and 42: 11.4.7 SM Response in SM_ENC_SIGOri
Page 43 and 44: 12. APDU ReferenceThe CIE supports
Page 45 and 46: 6A 86 Incorrect P1-P26A 87 Lc incon
Page 47 and 48: The PUT DATA - DATA_OCI acts on the
Page 49 and 50: 3DES - SM Cipher 10h 83h 03h3DES -
Page 51 and 52: 3 8Fh 6 BYTE 1: Not used - MUST be
Page 53 and 54: Table35Table 34: SELECT FILE Comman
Page 55 and 56: The operation is possible if the ac
Page 57 and 58: n has to be different from FFh.P1=0
Page 59 and 60: First and NextLast and PreviousSecu
Page 61 and 62: acktrackingallowed.b6 = 0b5 = 0b4 -
Page 63 and 64: 12.13 RESET RETRY COUNTERCLA INS P1
Page 65 and 66: 12.15 GIVE RANDOMCLA INS P1 P2 P3 D
Page 67 and 68: Security:The access condition to sa
Page 69 and 70: The access condition to satisfy is
Page 71 and 72: 0X 04 00 00 LC = 00 EmptyTable 59:
Page 73 and 74: • The length in bits of the priva
Page 75 and 76: • a sequence of q cipher text blo

C.I.E – Carta di Identità Elettronica Functional Specification Version 2.0

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?