C.I.E – Carta di Identità Elettronica Functional Specification Version 2.0

More documents

Recommendations

Info

• Step 2: set up the P_T_O and P_T_BP_T_O:T L V81h RResponse Data FieldP_T_B:P_T_OPaddingR+2 bytes ISO / IEC 9797 method 1 (S=0..7 bytes)• Step 3: MAC computation and MAC Object (MAC_OBJ) set upMAC is computed on the string:Header Block(n+1)*8 bytesP_T_BR+S+2 bytesThe resulting M=MAC(Header Block || P_T_B) is an 8 bytes long string.The MAC_OBJ (10 bytes) is composed as follow:T L Value8Eh 8M• Step 3: APDU Response in SM_SIG modeEnciphered ResponseP_T_O (R+2 bytes) MAC_OBJSWSW1||SW2Note: the response in SM_SIG mode is 12 bytes wider than the plain one, so the maximum netlength (Le) allowed in this mode is 256-12=244 bytes.Example:The terminal wants to read 5 bytes from the card, in SM_SIG. Since the answer is 12 bytes longerthan the net length of the data, the command sent is: 0Ch B0h 00h 00h 11hCIE - Functional Specification v 2.0 -Page 40/76
11.4.7 SM Response in SM_ENC_SIGOriginal APDU response:Response Data Field (R bytes) Status Word (SW1-SW2)• Step 1: set up the HEADER BLOCKHeader Block is set up as described in step 1 of SM_SIG mode description.• Step 2: set up the Cipher Text Object (C_T_O)C_T_O is built as described in Step 1 and 2 of SM Response in SM_Enc section• Step 3: set up the Cipher Text Block (C_T_B)C_T_B:C_T_OR+P+3 bytesPaddingISO / IEC 9797 method 1 (S=0..7 bytes)• Step 4: MAC computation and MAC Object (MAC_OBJ) set upMAC is computed on the string:Header Block(n+1)*8 bytesC_T_BR+P+S+3 bytesThe resulting M=MAC(Header Block || C_T_B) is an 8 bytes long string.The MAC_OBJ (10 bytes) is composed as follow:T L Value8Eh 8M• Step 5: APDU Response in SM_SIG and SM_ENC modeEnciphered ResponseSWCIE - Functional Specification v 2.0 -Page 41/76
Page 1 and 2: C.I.E. - Carta di Identità Elettro
Page 3 and 4: Table of Contents1. Revision Histor
Page 5 and 6: 12.17 GENERATE KEY PAIR ...........
Page 7 and 8: 2. IntroductionThis document is the
Page 9 and 10: 4. Reference Documents1. ISO/IEC 78
Page 11 and 12: Public Key - That key of an entity
Page 13 and 14: lsbLSBMACMFmsbMSBMSEMTSCOSOCIPINPPP
Page 15 and 16: 6. Electrical ParametersFor all ele
Page 17 and 18: 8. Answer To Reset (ATR)The Answer
Page 19 and 20: XXh XXh H5/H6 Y02h H7 Y49h H8 Y54h
Page 21 and 22: 9. Application SelectionNo explicit
Page 23 and 24: Record structure:The EF is seen at
Page 25 and 26: Linear Variable TLV or Cyclic EFSiz
Page 27 and 28: The card maintains an internal Secu
Page 29 and 30: BSO ID 1 01h to 1FhOPTION 1 See Tab
Page 31 and 32: RSA public key Exponent for Authent
Page 33 and 34: 11.4 Secure MessagingThe Secure Mes
Page 35 and 36: Byte Nr. SM Condition1 ENC USE IN2
Page 37 and 38: • Step 4: APDU command set up in
Page 39: 11.4.5 SM Response in SM_ENCOrigina
Page 43 and 44: 12. APDU ReferenceThe CIE supports
Page 45 and 46: 6A 86 Incorrect P1-P26A 87 Lc incon
Page 47 and 48: The PUT DATA - DATA_OCI acts on the
Page 49 and 50: 3DES - SM Cipher 10h 83h 03h3DES -
Page 51 and 52: 3 8Fh 6 BYTE 1: Not used - MUST be
Page 53 and 54: Table35Table 34: SELECT FILE Comman
Page 55 and 56: The operation is possible if the ac
Page 57 and 58: n has to be different from FFh.P1=0
Page 59 and 60: First and NextLast and PreviousSecu
Page 61 and 62: acktrackingallowed.b6 = 0b5 = 0b4 -
Page 63 and 64: 12.13 RESET RETRY COUNTERCLA INS P1
Page 65 and 66: 12.15 GIVE RANDOMCLA INS P1 P2 P3 D
Page 67 and 68: Security:The access condition to sa
Page 69 and 70: The access condition to satisfy is
Page 71 and 72: 0X 04 00 00 LC = 00 EmptyTable 59:
Page 73 and 74: • The length in bits of the priva
Page 75 and 76: • a sequence of q cipher text blo

C.I.E – Carta di Identità Elettronica Functional Specification Version 2.0

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?