C.I.E – Carta di Identità Elettronica Functional Specification Version 2.0

Confidentiality (CON)B883h84h1 Object IDPSO_DECPSO_ENCAuthentication component (TEST)A483h84h1 Object ID EXT AUTHDigital Signature Component (CDS) B683h84h1 Object ID PSO_CDSTable 52: P2 and Data Field coding for MSE SET commandThe CSE is the card security status, stored in volatile memory, and reset at every card session (i.e.after each reset of the card). For details on the CSE structure, see the dedicated chapter.To illustrate the use of the CSE, consider the PSO_ENC and PSO_DEC commands. Thesecommands use an explicit secure object where the key (public or private) is stored.Thus, before the execution of a PSO command, the CSE component CON is set (via RESTORE orSET): this component refers to the BS object, which has to be used for the 3DES/RSA algorithms.The CSE contains 3 components:Component Type of Objects UsedRelated CommandsCONRSA KPRI CRYPT/DECRYPT3DES CRYPT/DECRYPTPSO_DECPSO_ENCDS RSA KPRI SIGN PSO_CDSTEST3DES EXT AUTHRSA KPUB EXT AUTHEXT AUTHTable 53: CSE components12.16.1 MSE mode RESTOREThe functionality of the MSE command in the RESTORE mode is the following:• Use the backtracking mechanism to search the SE object whose ID is in P2• If the wanted SE object is found, it becomes the CSE. Afterward the CSE can be used forexecute the commands PSO_DEC, PSO_ENC, PSO_CDS, EXT AUTH.• To execute the MSE RESTORE, the specified SE object has to be created in advance by thecommand PUT DATA – SECI.CIE - Functional Specification v 2.0 -Page 66/76