C.I.E – Carta di Identità Elettronica Functional Specification Version 2.0

More documents

Recommendations

Info

13.2.2 3DESFollowing figures show the of Triple DES for encipher a plaintext M with 2 or 3 keys.MD K1EncipheringCD -1 K1DecipheringD -1 K2D K2D K1D -1 K1CMFigure 2: 3DES computation with 2 DES KeysMD K1EncipheringCD -1 K3DecipheringD -1 K2D K2D K3D -1 K1CMFigure 3: 3DES with 3 DES keys13.2.3 Cipher Blocking Chain (CBC)When the plaintext M length is more than 8-bytes it is possible to use the 3DES in CBC mode.The CBC mode is a way to perform the DES algorithm on an n-bit plaintext M.The symbols employed for the CBC mode are:• a sequence of q plaintext blocks P 1 , P 2 , …, P q each of 64 bits• a key K• a Starting Vector (SV) of 64 bits. For the CIE it is a string of 00h.CIE - Functional Specification v 2.0 -Page 74/76
• a sequence of q cipher text blocks C 1 , C 2 , …, C q each of 64 bitsP 1P 2P qSV++...+ENC KENC K...ENC KC 1C 2...C qFigure 4: CBC enciphering schemeIn case of data encryption, the output is the string C obtained by chaining C 1 ,C 2 ,...,C q .In case of MAC computation, the output is the last block (C q ).The consequent deciphering operation is:C 1C 2C qDEC KDEC K...DEC KSV++...+P 1P 2...P qFigure 5: CBC deciphering scheme13.2.4 MAC3The MAC3 (Message Authentication Code) is a key-dependent one-way hash function. Thismechanism is very useful to provide authenticity without secrecy. It uses a symmetric-keyalgorithm with a 16 or 24 bytes key.The following figure shows the scheme of MAC 3. The SV is a string of 64-bit all set to 0.CIE - Functional Specification v 2.0 -Page 75/76
Page 1 and 2:
C.I.E. - Carta di Identità Elettro
Page 3 and 4:
Table of Contents1. Revision Histor
Page 5 and 6:
12.17 GENERATE KEY PAIR ...........
Page 7 and 8:
2. IntroductionThis document is the
Page 9 and 10:
4. Reference Documents1. ISO/IEC 78
Page 11 and 12:
Public Key - That key of an entity
Page 13 and 14:
lsbLSBMACMFmsbMSBMSEMTSCOSOCIPINPPP
Page 15 and 16:
6. Electrical ParametersFor all ele
Page 17 and 18:
8. Answer To Reset (ATR)The Answer
Page 19 and 20:
XXh XXh H5/H6 Y02h H7 Y49h H8 Y54h
Page 21 and 22:
9. Application SelectionNo explicit
Page 23 and 24: Record structure:The EF is seen at
Page 25 and 26: Linear Variable TLV or Cyclic EFSiz
Page 27 and 28: The card maintains an internal Secu
Page 29 and 30: BSO ID 1 01h to 1FhOPTION 1 See Tab
Page 31 and 32: RSA public key Exponent for Authent
Page 33 and 34: 11.4 Secure MessagingThe Secure Mes
Page 35 and 36: Byte Nr. SM Condition1 ENC USE IN2
Page 37 and 38: • Step 4: APDU command set up in
Page 39 and 40: 11.4.5 SM Response in SM_ENCOrigina
Page 41 and 42: 11.4.7 SM Response in SM_ENC_SIGOri
Page 43 and 44: 12. APDU ReferenceThe CIE supports
Page 45 and 46: 6A 86 Incorrect P1-P26A 87 Lc incon
Page 47 and 48: The PUT DATA - DATA_OCI acts on the
Page 49 and 50: 3DES - SM Cipher 10h 83h 03h3DES -
Page 51 and 52: 3 8Fh 6 BYTE 1: Not used - MUST be
Page 53 and 54: Table35Table 34: SELECT FILE Comman
Page 55 and 56: The operation is possible if the ac
Page 57 and 58: n has to be different from FFh.P1=0
Page 59 and 60: First and NextLast and PreviousSecu
Page 61 and 62: acktrackingallowed.b6 = 0b5 = 0b4 -
Page 63 and 64: 12.13 RESET RETRY COUNTERCLA INS P1
Page 65 and 66: 12.15 GIVE RANDOMCLA INS P1 P2 P3 D
Page 67 and 68: Security:The access condition to sa
Page 69 and 70: The access condition to satisfy is
Page 71 and 72: 0X 04 00 00 LC = 00 EmptyTable 59:
Page 73: • The length in bits of the priva
show all

C.I.E – Carta di Identità Elettronica Functional Specification Version 2.0

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?