BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

3.3.2 GENERATE ASYMMETRIC KEY PAIR Card Command

NIST PIV and digital identity SP 800-73-5 against SP 800-73-4
All changes in this version
added 3 PIV Card Application Card Command Interface part of 3.3

Title changed

Before · SP 800-73-4

After · SP 800-73-5

GENERATE ASYMMETRIC KEY PAIR Card Command

Control changed

Before · SP 800-73-4

After · SP 800-73-5

The GENERATE ASYMMETRIC KEY PAIR card command initiates the generation and storage of the reference data of an asymmetric key pair (i.e., a public key and a private key) in the card. The public key of the generated key pair is returned as the response to the command. If there is reference data currently associated with the key reference, it is replaced in full by the generated data.

Command Syntax CLA '00' or '10' indicating command chaining INS '47' P1 '00' P2 Key reference '04', '9A', '9C', '9D', or '9E' Lc Length of data field Data Field Control reference template. See Table 11 . Le '00'

Table 11. Data objects in the template (Tag 'AC')

Name Tag M/O Description Cryptographic mechanism identifier '80' M See Part 1, Table 6 Parameter '81' C Specific to the cryptographic mechanism

Response Syntax Data Field Data objects of public key of generated key pair. See Table 12 SW1-SW2 Status word Table 12. Data objects in the template (Tag '7F49')

Name Tag Public-key data objects for RSA Modulus '81' Public exponent '82'

Public key data objects for ECC Point '86'

The public-key data object in tag '86' is encoded as follows:

Table 13. Public-key encoding for ECC

Tag Length Value '86' L 04 || X || Y [SECG , Section 2.3.3]

The octet '04' indicates that the X and Y coordinates of point P are encoded without the use of point compression. The length L is 65 bytes for points on Curve P-256 and 97 bytes for points on Curve P-384.

SW1 SW2 Meaning

'61' 'xx' Successful execution where SW2 encodes the number of response data bytes still available '69' '82' Security status not satisfied '6A' '80' Incorrect parameter in command data field (e.g., unrecognized cryptographic mechanism) '6A' '81' Function not supported

'6A' '86' Incorrect parameter P2; the cryptographic mechanism of the reference data to be generated is different than the cryptographic mechanism of the reference data of a given key reference '90' '00' Successful execution