BaselineWatch
Desk

4.1.8 Command Interface

NIST PIV and digital identity SP 800-73-5 against SP 800-73-4
All changes in this version
removed 4 Secure Messaging part of 4.1

Title changed

Before · SP 800-73-4

Command Interface

After · SP 800-73-5

Command Interface

Control changed

Before · SP 800-73-4

The following command interface shall be used for the key establishment protocol.

Command Syntax

CLA '00' INS '87' P1 Algorithm reference ('27' or '2E'), as specified in the 0xAC tag of the application property template P2 '04' (PIV Secure Messaging key). L c Length of data field

Data Field '7C' L1 { '81' L2 { CB H || ID sH || Q eH } '82 00' }, where CB H is 0x00, ID sH is an 8-byte client application identifier as described in Section 4.1.3 , and Q eH is an ephemeral public key encoded as 04 || X || Y, as specified in the “Value” column of Table 13 . L e '00'

Data Field '7C' L1 { '82' L2 { CB ICC || N ICC || AuthCryptogram ICC || C ICC } } SW1-SW2 Status word

'61' 'xx' Successful execution where SW2 encodes the number of response data bytes still available '6A' '80' Incorrect parameter in command data field '6A' '86' Incorrect parameter in P1 or P2

After · SP 800-73-5

The following command interface shall be used for the key establishment protocol.

Command Syntax

CLA '00' INS '87' P1 Algorithm reference ('27' or '2E'), as specified in the 0xAC tag of the application property template P2 '04' (PIV Secure Messaging key). L c Length of data field

Data Field '7C' L1 { '81' L2 { CB H || ID sH || Q eH } '82 00' }, where CB H is 0x00, ID sH is an 8-byte client application identifier as described in Section 4.1.3 , and Q eH is an ephemeral public key encoded as 04 || X || Y, as specified in the “Value” column of Table 13 . L e '00'

Data Field '7C' L1 { '82' L2 { CB ICC || N ICC || AuthCryptogram ICC || C ICC } } SW1-SW2 Status word

'61' 'xx' Successful execution where SW2 encodes the number of response data bytes still available '6A' '80' Incorrect parameter in command data field '6A' '86' Incorrect parameter in P1 or P2