BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

Appendix E Glossary

NIST PIV and digital identity SP 800-73-5 against SP 800-73-4
All changes in this version
added Appendix E Glossary

Title changed

Before · SP 800-73-4

After · SP 800-73-5

Glossary

Control changed

Before · SP 800-73-4

After · SP 800-73-5

algorithm identifier A 1-byte identifier that specifies a cryptographic algorithm and key size. For symmetric cryptographic operations, the algorithm identifier also specifies a mode of operation (i.e., ECB).

application identifier A globally unique identifier of a card application, as adapted from ISO/IEC 7816-4 .

authenticable entity An entity that can successfully participate in an authentication protocol with a card application.

BER-TLV data object A data object coded according to ISO/IEC 8824-2:2021

card An integrated circuit card.

card application A set of data objects and card commands that can be selected using an application identifier.

client application A program running on a computer in communication with a card interface device.

card management operation Any operation involving the PIV Card Application Administrator.

Card Verifiable Certificate A certificate stored on the card that includes a public key, the signature of certification authority, and the information needed to verify the certificate.

data object An item of information seen at the card command interface with a specified a name, a description of logical content, a format, and a coding.

key reference A 1-byte identifier that specifies a cryptographic key according to its PIV Key Type. The identifier is part of the cryptographic material used in a cryptographic protocol, such as an authentication or a signing protocol.

MSCUID A deprecated (previously optional legacy) identifier included for compatibility with Common Access Card and Government Smart Card Interoperability Specifications.

object identifier A globally unique identifier of a data object, as adapted from ISO/IEC 8824-2:2021

pairing code An 8-digit code used to establish a relationship between the PIV Card and a device for the purpose of creating the virtual contact interface after secure messaging has been established.

PIV Key Type The type of a key. The PIV Key Types are 1) PIV Authentication key, 2) Card Authentication key, 3) digital signature key, 4) key management key, 5) retired key management key, 6) PIV Secure Messaging key, and 7) PIV Card Application Administration key. relying party An entity that relies upon the subscriber’s credentials, typically to process a transaction or grant access to information or a system.

status word Two bytes returned by an integrated circuit card after processing any command that signify the success of or errors encountered during said processing.