BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

5 PIV Card Application Administration Keys

NIST PIV and digital identity SP 800-78-5 against SP 800-78-4
All changes in this version
modified 5 PIV Card Application Administration Keys

Title

PIV Card Application Administration Keys

Control changed

Before · SP 800-78-4

PIV Cards may support card activation by the card management system to support card personalization and post-issuance card update. PIV Cards that support card personalization and post-issuance updates perform a challenge response protocol using a symmetric cryptographic key (i.e., the PIV Card Application Administration Key) to authenticate the card management system. After successful authentication, the card management system can modify information stored in the PIV Card. Table 5-1 , below, establishes specific requirements for cryptographic algorithms and key sizes for PIV Card Application Administration Keys.

Table 5-1. Algorithm and Key Size Requirements for PIV Card Application Administration Keys

Card Expiration Date Algorithm

After 12/31/2010 3TDEA AES-128, AES-192, or AES-256

After · SP 800-78-5

PIV Cards may support card activation by the card management system to support card personalization and post-issuance card updateupdates. PIV Cards that support card personalization and post-issuance updates perform a challenge responsechallenge-response protocol using a symmetric cryptographic key (i.e., the PIV Card Application Administration Key) to authenticate the card management system. After successful authentication, the card management system can modify information stored inon the PIV Card. Table 5-1 , below,7 establishes specific requirements for cryptographic algorithms and key sizes for PIV Card Application Administration Keys.

Table 5-17. Algorithm and Keykey Sizesize Requirementsrequirements for PIV Card Application Administration Keys

Card Expiration Date Algorithm

AfterThrough 12/December 31/2010, 2030 3TDEA (deprecated) AES-128, AES-192, or AES-256 After December 31, 2030 AES-128, AES-192, or AES-256