BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

3.1.2 GET DATA Card Command

NIST PIV and digital identity SP 800-73-5 against SP 800-73-4
All changes in this version
modified 3 PIV Card Application Card Command Interface part of 3.1

Title

GET DATA Card Command

Control changed

Before · SP 800-73-4

The GET DATA card command retrieves the data content of the single data object whose tag is given in the data field. 5

Command Syntax

CLA '00' or '0C' for secure messaging INS 'CB' P1 '3F' P2 'FF' L c Length of data field * Data Field See Table 6 L e '00'

* The L c value is '05' for all PIV data objects except for the 0x7E interindustry tag (Discovery Object), which has an L c value of '03', and the 0x7F61 interindustry tag (Biometric Information Templates (BIT) Group Template), which has an L c value of '04'.

Table 6. Data Objects in the Data Field of the GET DATA Card Command Name Tag M/O Comment Tag list '5C' M BER-TLV tag of the data object to be retrieved. See Table 3, Part 1.

For the 0x7E Discovery Object (if present) and the 0x7F61 BIT Group Template (if present):

Data Field
- BER-TLV of the 0x7E Discovery data object (see Section 3.3.2, Part 1 for a description of the Discovery Object’s structure returned in the data field) or
- BER-TLV of the 0x7F61 BIT Group Template (see Table 7 of SP 800-76) SW1-SW2 Status word

For all other PIV data objects (if present):

Data Field BER-TLV with the tag '53' containing in the value field of the requested data object. SW1-SW2 Status word

5 The GET RESPONSE command is used in conjunction with GET DATA to accomplish the reading of larger PIV data objects. The GET RESPONSE command is illustrated in Appendix A.4.1 (Command 3). '61' 'xx' Successful execution where SW2 encodes the number of response data bytes still available '69' '82' Security status not satisfied '6A' '82' Data object not found

After · SP 800-73-5

The GET DATA card command retrieves the data content of the single data object whose tag is given in the data field. 5

5 The GET RESPONSE command is used in conjunction with GET DATA to read larger PIV data objects. The GET RESPONSE command is illustrated in Appendix A.4.1 (Command 3). Command Syntax

 CLA '00' or '0C' for secure messaging INS 'CB' P1 '3F' P2 'FF' L cLc Length of data field * Data Field See Table 6 L e '00'

*6 The L cLc value is '05' for all PIV data objects except for the 0x7E interindustry tag (Discovery Object), which has an L cLc value of '03', and the 0x7F61 interindustry tag (Biometric Information Templates (BIT) Group Template), which has an L cLc value of '04'. Data Field See Table 6 Le '00'

Table 6. Data Objectsobjects in the Datadata Fieldfield of the GET DATA Card Commandcard command

Name Tag M/O Comment Tag list '5C' M BER-TLV tag of the data object to be retrieved. See Table 3, Part 1.

Response Syntax

For the 0x7E Discovery Object (if present) and the 0x7F61 BIT Group Template (if present):

Data Field
- BER-TLV of the 0x7E Discovery data object (see SectionSec. 3.3.2, Part 1 for a description of the Discovery Object’s structure returned in the data field) or
- BER-TLV of the 0x7F61 BIT Group Template (see Table 7 of SP 800-76) SW1-SW2 Status word

For all other PIV data objects (if present):

Data Field BER-TLV with the tag '53' containing in the value field of the requested data object. SW1-SW2 Status word

5 The GET RESPONSE command is used in conjunction with GET DATA to accomplish the reading of larger PIV data objects. The GET RESPONSE command is illustrated in Appendix A.4.1SW1 (CommandSW2 3).Meaning '61' 'xx' Successful execution where SW2 encodes the number of response data bytes still available '69' '82' Security status not satisfied '6A' '82' Data object not found '90' '00' Successful execution