BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

4.1.8 Command Interface

NIST PIV and digital identity SP 800-73-5 against SP 800-73-4
All changes in this version
modified 4 Secure Messaging part of 4.1

Title

Command Interface

Control changed

Before · SP 800-73-4

The following command interface shall be used for the key establishment protocol.

Command Syntax

CLA '00' INS '87' P1 Algorithm reference ('27' or '2E'), as specified in the 0xAC tag of the application property template P2 '04' (PIV Secure Messaging key). L c Length of data field

Data Field '7C' L1 { '81' L2 { CB H || ID sH || Q eH } '82 00' }, where CB H is 0x00, ID sH is an 8-byte client application identifier as described in Section 4.1.3 , and Q eH is an ephemeral public key encoded as 04 || X || Y, as specified in the “Value” column of Table 13 . L e '00'

Data Field '7C' L1 { '82' L2 { CB ICC || N ICC || AuthCryptogram ICC || C ICC } } SW1-SW2 Status word

'61' 'xx' Successful execution where SW2 encodes the number of response data bytes still available '6A' '80' Incorrect parameter in command data field '6A' '86' Incorrect parameter in P1 or P2

After · SP 800-73-5

The following command interface shallSHALL be used for the key establishment protocol.

Command Syntax

 CLA '00' INS '87' P1 Algorithm reference ('27' or '2E'), as specified in the 0xAC tag of the application property template P2 '04' (PIV Secure Messaging key). L cLc Length of data field

Data Field '7C' L1 { '81' L2 { CB HCBH || ID sHIDsH || Q eHQeH } '82 00' }, where CB HCBH is 0x00, ID sHIDsH is an 8-byte client application identifier as described in Section 4.1.3 , and Q eHQeH is an ephemeral public key encoded as 04 || X || Y, as specified in the “Value” column of Table 13 . L eLe '00'

Response Syntax Data Field '7C' L1 { '82' L2 { CB ICCCBICC || N ICCNICC || AuthCryptogram ICCAuthCryptogramICC || C ICCCICC } } SW1-SW2 Status word

SW1 SW2 Meaning '61' 'xx' Successful execution, where SW2 encodes the number of response data bytes still available '6A' '80' Incorrect parameter in command data field '6A' '86' Incorrect parameter in P1 or P2 '90' '00' Successful execution