BaselineWatch
Desk

Appendix B Glossary

NIST PIV and digital identity SP 800-73-5 against SP 800-73-4
All changes in this version
added Appendix B Glossary

Title changed

Before · SP 800-73-4

After · SP 800-73-5

Glossary

Control changed

Before · SP 800-73-4

After · SP 800-73-5

application identifier A globally unique identifier of a card application, , as adapted from ISO/IEC 7816-4 .

application session The period of time within a card session between when a card application is selected, and a different card application is selected or the card session ends.

algorithm identifier A 1-byte identifier that specifies a cryptographic algorithm and key size. For symmetric cryptographic operations, the algorithm identifier also specifies a mode of operation (i.e., ECB).

BER-TLV data object A data object coded according to ISO/IEC 8824-2:2021 .

card An integrated circuit card.

card application A set of data objects and card commands that can be selected using an application identifier.

card interface device An electronic device that connects an integrated circuit card and the card applications therein to a client application.

card reader Synonym for card interface device .

client application A computer program running on a computer in communication with a card interface device.

card management operation Any operation involving the PIV Card Application Administrator.

data object An item of information seen at the card command interface for which is specified a name, a description of logical content, a format, and a coding.

interface device Synonym for card interface device .

key reference A 1-byte identifier that specifies a cryptographic key according to its PIV Key Type. The identifier is part of cryptographic material used in a cryptographic protocol, such as an authentication or a signing protocol.

object identifier A globally unique identifier of a data object, as adapted from ISO/IEC 8824-2:2021 .

reference data Cryptographic material used in the performance of a cryptographic protocol, such as an authentication or a signing protocol. The reference data length is the maximum length of a password or PIN. For algorithms, the reference data length is the length of a key.

status word Two bytes returned by an integrated circuit card after processing any command that encodes the success of or errors encountered during said processing. template A (constructed) BER-TLV data object whose value field contains specific BER-TLV data objects.