NIST PIV and digital identity SP 800-73-4 → SP 800-73-5
Published 2024-07-15
Snapshot taken 2026-10-19 23:49 · sp-800-73-pt1 source
Snapshot taken 2026-10-19 23:49 · sp-800-73-pt1 source
+ 19 added: Appendix A, Appendix B, B.1, B.1.1, B.1.2, B.1.3, B.1.4, B.1.5, B.1.6, B.1.7…
− 37 removed: 1.1, 1.2, 1.3, 1.4, 2, 3, 3.1, 3.1.1, 3.1.2, 3.2…
~ 1 revised: 1
Why this release, in the publisher's words
Appendix G Revision History: SP 800-73 April 2005 Initial Release SP 800-73-1 April 2006 Incorporated Errata SP 800-73-2 September 2008 • Separated SP 800-73 into four Parts:
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-73pt1-5.pdfAll · 571 The value of the GUID data element of the CHUID data object SHALL be a 16-byte binary · 11 The value of the GUID data element of the CHUID data object shall be a 16-byte binary · 42 Overview: Concepts and Constructs · 13 PIV Card Application Card Command Interface · 124 Secure Messaging · 195 06 07 08 90 00' · 1Appendix A PIV Data Model · 1Appendix B PIV Authentication Mechanisms · 10Appendix C PIV Algorithm Identifier Discovery · 4Appendix D List of Symbols, Abbreviations, and Acronyms · 1Appendix E Glossary · 1Appendix F Notation · 1Appendix G Revision History · 1
Controls added, removed or revised 57
| Control | Title | Change |
|---|---|---|
| 1 | The value of the GUID data element of the CHUID data object SHALL be a 16-byte binary | Control text, Title |
| 1.1 | Purpose | removed |
| 1.2 | Scope | removed |
| 1.3 | Audience and Assumptions | removed |
| 1.4 | Content and Organization | removed |
| 2 | Overview: Concepts and Constructs | removed |
| 3 | PIV Card Application Card Command Interface | removed |
| 3.1 | PIV Card Application Card Commands for Data Access | removed |
| 3.1.1 | SELECT Card Command | removed |
| 3.1.2 | GET DATA Card Command | removed |
| 3.2 | PIV Card Application Card Commands for Authentication | removed |
| 3.2.1 | VERIFY Card Command | removed |
| 3.2.1.1 | PIV Card Application PIN and Global PIN | removed |
| 3.2.1.2 | On-Card Biometric Comparison | removed |
| 3.2.1.3 | Pairing Code | removed |
| 3.2.2 | CHANGE REFERENCE DATA Card Command | removed |
| 3.2.3 | RESET RETRY COUNTER Card Command | removed |
| 3.2.4 | GENERAL AUTHENTICATE Card Command | removed |
| 4 | Secure Messaging | removed |
| 4.1 | The Key Establishment Protocol | removed |
| 4.1.1 | Client Application Steps | removed |
| 4.1.2 | PIV Card Application Protocol Steps | removed |
| 4.1.3 | Notations | removed |
| 4.1.4 | Cipher Suite | removed |
| 4.1.5 | Card Verifiable Certificates | removed |
| 4.1.6 | Key Derivation | removed |
| 4.1.7 | Key Confirmation | removed |
| 4.1.8 | Command Interface | removed |
| 4.2 | Secure Messaging | removed |
| 4.2.1 | Secure Messaging Data Objects | removed |
| 4.2.2 | Command and Response Data Confidentiality | removed |
| 4.2.3 | Command Integrity | removed |
| 4.2.4 | Command with PIV Secure Messaging | removed |
| 4.2.5 | Response Integrity | removed |
| 4.2.6 | Response with PIV Secure Messaging | removed |
| 4.2.7 | Error Handling | removed |
| 4.3 | Session Key Destruction | removed |
| 05 | 06 07 08 90 00' | removed |
| Appendix A | PIV Data Model | added |
| Appendix B | PIV Authentication Mechanisms | added |
| B.1 | Authentication Mechanism Diagrams | added |
| B.1.1 | Authentication Using PIV Biometrics (BIO) | added |
| B.1.2 | Authentication Using PIV Authentication Key | added |
| B.1.3 | Authentication Using Card Authentication Key | added |
| B.1.4 | Authentication Using OCC (OCC-AUTH) | added |
| B.1.5 | Authentication Using PIV Visual Credentials (Deprecated) | added |
| B.1.6 | Authentication Using PIV CHUID (Removed) | added |
| B.1.7 | Authentication Using Secure Messaging Key (SM-AUTH) | added |
| B.2 | Summary Table | added |
| Appendix C | PIV Algorithm Identifier Discovery | added |
| C.1 | PIV Algorithm Identifier Discovery for Asymmetric Cryptographic Authentication | added |
| C.2 | PIV Algorithm Identifier Discovery for Symmetric Cryptographic Authentication | added |
| C.3 | PIV Algorithm Identifier Discovery for Secure Messaging | added |
| Appendix D | List of Symbols, Abbreviations, and Acronyms | added |
| Appendix E | Glossary | added |
| Appendix F | Notation | added |
| Appendix G | Revision History | added |
Read every requirement in this version · All versions of NIST PIV and digital identity