C.I.E – Carta di Identità Elettronica Functional Specification Version 2.0

P1=xxxx x000:• P2 has to be the reference to a PIN object, whose data length is n.• the object referenced by P2 has an access condition for AC_UNBLOCK thatrefrences another PIN object whose data length is m.the first m bytes of the command Data Field are compared with the object data of the PIN objectwhich is referenced by the AC_UNBLOCK of the PIN object referenced in P2. If the comparisonsucceeds the error counter is set to its maximum value, and the object data are replaced by the nextn bytes in the command Data Field.P1=xxxx x001:• The PIN object referenced by P2 has an access condition for AC_UNBLOCK whichreferences a PIN object whose data length is m.the command Data Field is compared with the object data field of the PIN object referenced by theAC_UNBLOCK of the object referenced in P2. If the comparison succeeds the reset counter is setto its maximum value.P1=xxxx x011:The data field is empty. The AC for unblocking the referenced BSO has to be verified before thecommand is issued.12.14 GET CHALLENGECLA INS P1 P2P300 84 00 00 LETable 48: GET CHALLENGE commandThis command makes the card generate and send a random number. The generation of randomnumber is used for the next External Authenticate command or for the SM computations.The generated random is valid only for the next External Authenticate. After that, a new GetChallenge has to be issued for another External Authenticate.It is not needed to have External Authenticate follow immediately the Get Challenge.A GET CHALLENGE command will give as an output LE bytes (the required random).Security:no access condition has to be granted.CIE - Functional Specification v 2.0 -Page 64/76