C.I.E – Carta di Identità Elettronica Functional Specification Version 2.0

More documents

Recommendations

Info

P1=xxxx x000:• P2 has to be the reference to a PIN object, whose data length is n.• the object referenced by P2 has an access condition for AC_UNBLOCK thatrefrences another PIN object whose data length is m.the first m bytes of the command Data Field are compared with the object data of the PIN objectwhich is referenced by the AC_UNBLOCK of the PIN object referenced in P2. If the comparisonsucceeds the error counter is set to its maximum value, and the object data are replaced by the nextn bytes in the command Data Field.P1=xxxx x001:• The PIN object referenced by P2 has an access condition for AC_UNBLOCK whichreferences a PIN object whose data length is m.the command Data Field is compared with the object data field of the PIN object referenced by theAC_UNBLOCK of the object referenced in P2. If the comparison succeeds the reset counter is setto its maximum value.P1=xxxx x011:The data field is empty. The AC for unblocking the referenced BSO has to be verified before thecommand is issued.12.14 GET CHALLENGECLA INS P1 P2P300 84 00 00 LETable 48: GET CHALLENGE commandThis command makes the card generate and send a random number. The generation of randomnumber is used for the next External Authenticate command or for the SM computations.The generated random is valid only for the next External Authenticate. After that, a new GetChallenge has to be issued for another External Authenticate.It is not needed to have External Authenticate follow immediately the Get Challenge.A GET CHALLENGE command will give as an output LE bytes (the required random).Security:no access condition has to be granted.CIE - Functional Specification v 2.0 -Page 64/76
12.15 GIVE RANDOMCLA INS P1 P2 P3 Data Field80 86 00 00LC = n (length of datafield)Data from the terminalTable 49: GIVE RANDOM commandThis command allows the terminal to send a n byte random number. This random will be used forthe next response-SM (SIG or ENC-SIG) calculation.The random can be used only once. A new Give Random will overwrite the previous one.Security:no access condition has to be granted.12.16 MANAGE SECURITY ENVIRONMENT (MSE)CLA INS P1 P2 P3 Data Field00 22SeeTable51SeeTable51LC = DataFieldLengthData to be used in current security environment(CSE) in TLV format (See Table 51 and Table 52for more details)Table 50: MSE commandThe MSE command is used to load (mode RESTORE) or to set up (mode SET) the CSE (CurrentSecurity Environment). The MSE supported command modes are listed here:Mode P1 P2 Data FieldRESTORE F3 SEO ID EmptySET F1 See Table52 See Table52Table 51: MSE mode codingMSE SET commandCSE ComponentP2Data FieldT L VRelated commandsCIE - Functional Specification v 2.0 -Page 65/76
Page 1 and 2:
C.I.E. - Carta di Identità Elettro
Page 3 and 4:
Table of Contents1. Revision Histor
Page 5 and 6:
12.17 GENERATE KEY PAIR ...........
Page 7 and 8:
2. IntroductionThis document is the
Page 9 and 10:
4. Reference Documents1. ISO/IEC 78
Page 11 and 12:
Public Key - That key of an entity
Page 13 and 14: lsbLSBMACMFmsbMSBMSEMTSCOSOCIPINPPP
Page 15 and 16: 6. Electrical ParametersFor all ele
Page 17 and 18: 8. Answer To Reset (ATR)The Answer
Page 19 and 20: XXh XXh H5/H6 Y02h H7 Y49h H8 Y54h
Page 21 and 22: 9. Application SelectionNo explicit
Page 23 and 24: Record structure:The EF is seen at
Page 25 and 26: Linear Variable TLV or Cyclic EFSiz
Page 27 and 28: The card maintains an internal Secu
Page 29 and 30: BSO ID 1 01h to 1FhOPTION 1 See Tab
Page 31 and 32: RSA public key Exponent for Authent
Page 33 and 34: 11.4 Secure MessagingThe Secure Mes
Page 35 and 36: Byte Nr. SM Condition1 ENC USE IN2
Page 37 and 38: • Step 4: APDU command set up in
Page 39 and 40: 11.4.5 SM Response in SM_ENCOrigina
Page 41 and 42: 11.4.7 SM Response in SM_ENC_SIGOri
Page 43 and 44: 12. APDU ReferenceThe CIE supports
Page 45 and 46: 6A 86 Incorrect P1-P26A 87 Lc incon
Page 47 and 48: The PUT DATA - DATA_OCI acts on the
Page 49 and 50: 3DES - SM Cipher 10h 83h 03h3DES -
Page 51 and 52: 3 8Fh 6 BYTE 1: Not used - MUST be
Page 53 and 54: Table35Table 34: SELECT FILE Comman
Page 55 and 56: The operation is possible if the ac
Page 57 and 58: n has to be different from FFh.P1=0
Page 59 and 60: First and NextLast and PreviousSecu
Page 61 and 62: acktrackingallowed.b6 = 0b5 = 0b4 -
Page 63: 12.13 RESET RETRY COUNTERCLA INS P1
Page 67 and 68: Security:The access condition to sa
Page 69 and 70: The access condition to satisfy is
Page 71 and 72: 0X 04 00 00 LC = 00 EmptyTable 59:
Page 73 and 74: • The length in bits of the priva
Page 75 and 76: • a sequence of q cipher text blo
show all

C.I.E – Carta di Identità Elettronica Functional Specification Version 2.0

Create successful ePaper yourself

Delete template?

Save as template?