C.I.E – Carta di Identità Elettronica Functional Specification Version 2.0

11.4 Secure MessagingThe Secure Messaging (SM) is used to protect the communication between the interface device(IFD) and the smartcard. There are two ways to communicate data in SM format:• SM_ENC: APDU commands with enciphered data (data confidentiality)• SM_SIG: APDU commands with cryptographic checksum (data authentication andintegrity)It is possible to use a combination of the two (ENC followed by SIG). It is recommended forsecurity reasons to use SM_ENC only in conjunction with SM_SIG.The presence and the type of SM used is indicated by the APDU Class byte.Only the logical channel 0 is used, therefore the supported APDU Class byte values are:• X0h – No Secure Messaging• XCh - 3DES_CBC or MAC3 are performed on the transmitted data using symmetric keys.The command header is authenticated if MAC is used.The symmetric keys used by the smartcard to decrypt and/or verify the APDU commands areobtained from the SM condition related to the object or file on which the APDU command shouldoperate.The SM conditions for BSOs and files are defined at object/file creation time by the commandsCREATE FILE and PUT DATA (DATA_OCI).The SM conditions for BSOs and files are managed using the commands PUT DATA(DATA_OCI) and PUT DATA (DATA_FCI).The algorithms used in SM are• double length key 3DES for SM_ENC• MAC3 for SM_SIGthe cryptographic algorithms are detailed in Chapter 13.Before any SM command involving a signature (SM_SIG and SM_ENC_SIG), an n*8-byte longrandom has to be sent from the card to the terminal, with a GetChallenge command.The random generated by Get Challenge is valid for only one SM command.11.4.1 Secure Messaging ConditionThe possible values for the SM conditions are:• 01h… 1Fh: object ID of the SM BSO to use to compute ENC/SIG• FFh: no Secure Messaging condition defined for the operation.CIE - Functional Specification v 2.0 -Page 33/76