BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

4.1.3 Notations

NIST PIV and digital identity SP 800-73-5 against SP 800-73-4
All changes in this version
modified 4 Secure Messaging part of 4.1

Title

Notations

Control changed

Before · SP 800-73-4

Name Comment Format Size (in bytes) ICC Integrated Circuit Card (PIV Card) N/A N/A ID sICC Static, non-anonymous PIV Card identifier, which is the truncated hash of C ICC Binary 8 bytes

GUID Card UUID (see Section 3.4.1 of Part 1) Binary 16 bytes C ICC Secure messaging card verifiable certificate, which is authenticated by client application. See Section 4.1.5 . CVC

ID sH Client application identifier. This is a locally assigned identifier for the client application. If none is available, it could be set to all zeros. Binary 8 bytes

N ICC PIV Card Application nonce. See Table 14 for the length. Binary 16 or 24 bytes

SK CFRM Key confirmation key used to compute authentication cryptogram. See Table 14 for the length. 16 or 32 bytes

SK MAC , SK RMAC , SK ENC Secure messaging session keys. See Table 14 for encryption or MAC session key length. 16 or 32 bytes

T 8 (Data) Leftmost 8 bytes of Data . Binary 8 bytes T 16 (Data) Leftmost 16 bytes of Data . Binary 16 bytes KDF(Z, len, OtherInfo) Key Derivation Function (KDF) specified in Section 4.1.6 . N/A N/A

ECC_CDH Elliptic curve cryptography cofactor Diffie-Hellman (ECC CDH) primitive, as specified in [SP800-56A , Section 5.7.1.2]. N/A N/A

OtherInfo Input parameters to the KDF. See Section 4.1.6 . N/A N/A len The length (in bits) of the secret keying material to be generated using the KDF ( len = 512 for cipher suite 2 and 1024 for cipher suite 7). N/A N/A

CB ICC Protocol control byte returned by the PIV Card Binary 1 byte CB H Protocol control byte sent by client application (host) Binary 1 byte

After · SP 800-73-5

Table 17: Notations used in Protocol Description

Name Comment Format Size (in bytes) ICC Integrated Circuit Card (PIV Card) N/A N/A ID sICCIDsICC Static, non-anonymous PIV Card identifier, which is the truncated hash of C ICCCICC Binary 8 bytes

GUID Card UUID (see SectionSec. 3.4.1 of Part 1) Binary 16 bytes C ICCCICC Secure messaging card verifiable certificate, which is authenticated by client application. See SectionSec. 4.1.5 . CVC

IDName sHComment Format Size (in bytes) IDsH Client application identifier. This is a locally assigned identifier for the client application. If none is available, it could be set to all zeros. Binary 8 bytes

N ICCNICC PIV Card Application nonce. See Table 1418 for the length. Binary 16 or 24 bytes

SK CFRMSKCFRM Key confirmation key used to compute authentication cryptogram. See Table 1418 for the length. 16 or 32 bytes

SK MAC SKMAC, SK RMAC SKRMAC, SK ENCSKENC Secure messaging session keys. See Table 1418 for encryption or MAC session key length. 16 or 32 bytes

T 8 T8(Data) Leftmost 8 bytes of Data . Binary 8 bytes T 16 T16(Data) Leftmost 16 bytes of Data . Binary 16 bytes KDF(Z, len, OtherInfo) Key Derivation Function (KDF) specified in Section 4.1.6 . N/A N/A

ECC_CDH Elliptic curve cryptography cofactor Diffie-Hellman (ECC CDH) primitive, as specified in [SP800-56A , Section 5.7.1.2]. N/A N/A

OtherInfo Input parameters to the KDF. See Section 4.1.6 . N/A N/A len The length (in bits) of the secret keying material to be generated using the KDF ( len = 512 for cipher suite 2 and 1024 for cipher suite 7). N/A N/A

CB ICCCBICC Protocol control byte returned by the PIV Card Binary 1 byte CB HCBH Protocol control byte sent by client application (host) Binary 1 byte