C.I.E – Carta di Identità Elettronica Functional Specification Version 2.0

More documents

Recommendations

Info

CLA INS P1 P2 P3 Data Field0X 2400 = implicittest01 = explicittestb7 = 0 PIN under the MFb7 = 1 PIN search withbacktrackingb6 = 0b5 = 0b4 --- b0 PIN Identifier(BSO ID)LC = m (old) + n(new)where m is thelength of the oldPIN (m=0 if theold PIN hasalready beenverified) and n isthe length of thenew PIN valueVerify data (P1=0) orempty (P1=1)||New reference dataTable 43: CHANGE REFERENCE DATA commandIf P1 = 00h, the data of length m of the PIN object referenced in the AC_CHANGE of the BSOreferenced by parameter P2 are compared with the first m bytes of the Input Data Field.The data have to be equal in number and value. Partial string match is not considered as a validmatch.If the comparison fails, the retry counter of the BSO is decremented, and if it reaches zero, the BSOis blocked.If the comparison succeeds, the data field of the referenced BSO is updated with the next n bytes inthe Data Field of the command. The retry counter is reset to its preset maximum.If P1 = 01h, the right of the AC CHANGE of the BSO referenced by parameter P2 must have beengranted before (i.e. by a VERIFY command). No Verify data are sent and the BSO PIN data areoverwritten with the new reference data of the Input Data Field.If the belonging AC_CHANGE right has not been granted, the command will be immediatelyrejected.Change Reference Data has not to be used on Logical objects. No special error condition has to beissued for this case.Security:The access condition to satisfy is AC_CHANGE of relevant BSO.12.11 CHANGE KEY DATACLA INS P1 P2 P3 Data Field9X 24 Key Class (See Table24)PIN and LOGICALOBJECTS are notb7 = 0 BSO under the MFb7 = 1 BSO search withLC = NNew key data (seeNote below)CIE - Functional Specification v 2.0 -Page 60/76
acktrackingallowed.b6 = 0b5 = 0b4 --- b0 BSO IDTable 44: CHANGE KEY DATA commandThis command is used to change the data field of a key referenced by P1/P2 to the value given inthe Data Field and set the error counter to the maximum.The length of the new key data must be equal to the length of the old key data.Note:In case of a DES key, the new key data is exactly the key value, while in case of a RSA key, datacan be presented to the card in two formats:• New key data is the effective value of the key;• New key data is coded as in case of Put Data OCI command:oo, orIf the card accepts just one of these two formats, it must return an error when it receives the otherformat and it must not update the value of the key.CIE applications have to take in account the different behaviour that different behaviour thatdifferent card models may have due to backward compatibility reasons.Security:The access condition to satisfy is AC_ CHANGE of relevant BSO.12.12 EXTERNAL AUTHENTICATECLA INS P1 P2 P3 Data Fieldb7 = 0 BSO under the MFLC = N C/R response0X 82 00b7 = 1 BSO search with backtrackingb6 = 0b5 = 0CIE - Functional Specification v 2.0 -Page 61/76
Page 1 and 2:
C.I.E. - Carta di Identità Elettro
Page 3 and 4:
Table of Contents1. Revision Histor
Page 5 and 6:
12.17 GENERATE KEY PAIR ...........
Page 7 and 8:
2. IntroductionThis document is the
Page 9 and 10: 4. Reference Documents1. ISO/IEC 78
Page 11 and 12: Public Key - That key of an entity
Page 13 and 14: lsbLSBMACMFmsbMSBMSEMTSCOSOCIPINPPP
Page 15 and 16: 6. Electrical ParametersFor all ele
Page 17 and 18: 8. Answer To Reset (ATR)The Answer
Page 19 and 20: XXh XXh H5/H6 Y02h H7 Y49h H8 Y54h
Page 21 and 22: 9. Application SelectionNo explicit
Page 23 and 24: Record structure:The EF is seen at
Page 25 and 26: Linear Variable TLV or Cyclic EFSiz
Page 27 and 28: The card maintains an internal Secu
Page 29 and 30: BSO ID 1 01h to 1FhOPTION 1 See Tab
Page 31 and 32: RSA public key Exponent for Authent
Page 33 and 34: 11.4 Secure MessagingThe Secure Mes
Page 35 and 36: Byte Nr. SM Condition1 ENC USE IN2
Page 37 and 38: • Step 4: APDU command set up in
Page 39 and 40: 11.4.5 SM Response in SM_ENCOrigina
Page 41 and 42: 11.4.7 SM Response in SM_ENC_SIGOri
Page 43 and 44: 12. APDU ReferenceThe CIE supports
Page 45 and 46: 6A 86 Incorrect P1-P26A 87 Lc incon
Page 47 and 48: The PUT DATA - DATA_OCI acts on the
Page 49 and 50: 3DES - SM Cipher 10h 83h 03h3DES -
Page 51 and 52: 3 8Fh 6 BYTE 1: Not used - MUST be
Page 53 and 54: Table35Table 34: SELECT FILE Comman
Page 55 and 56: The operation is possible if the ac
Page 57 and 58: n has to be different from FFh.P1=0
Page 59: First and NextLast and PreviousSecu
Page 63 and 64: 12.13 RESET RETRY COUNTERCLA INS P1
Page 65 and 66: 12.15 GIVE RANDOMCLA INS P1 P2 P3 D
Page 67 and 68: Security:The access condition to sa
Page 69 and 70: The access condition to satisfy is
Page 71 and 72: 0X 04 00 00 LC = 00 EmptyTable 59:
Page 73 and 74: • The length in bits of the priva
Page 75 and 76: • a sequence of q cipher text blo
show all

C.I.E – Carta di Identità Elettronica Functional Specification Version 2.0

Create successful ePaper yourself

Delete template?

Save as template?