BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

5.3 PIV Card Command Interface Test Assertions

NIST PIV and digital identity SP 800-85A-4 against SP 800-85A-2
All changes in this version
modified 5 Test Assertions part of 5

Title

PIV Card Command Interface Test Assertions

Control changed

Before · SP 800-85A-2

This section provides conformance tests in the form of test assertions for the command set that is specified in Chapter 3, Part 2 of SP 800-73-3 (Card Application Card Command Interface) that the PIV Card Application is required to support. The test assertions are described through a test assertions template. The template provides placeholders for describing the purpose of the test, the preconditions required to exercise the test, the parameter values used in test invocation, and the expected results as well as the state of the PIV system (value of state variables), if any, that will be affected by the test run (post- condition). The conformance tests are run to validate the PIV Card Application. Interaction with the PIV Card Application takes place through the API of the driver that comes with the card reader. The list of commands in the PIV Card Application card command interface and the number of test cases, derived from test assertions in Appendix C are summarized in Table 5-3. Card Application Command Number of Test Cases (Appendix C) SELECT 5 (Contact) + 3 (Contactless) = 8 (Total) GET DATA 4 38 (Contact) + 34 (Contactless) = 72 (Total) VERIFY 7 (Contact) + 2 (Contactless) = 9 (Total) CHANGE REFERENCE DATA 7 (Contact) + 2 (Contactless) = 9 (Total) RESET RETRY COUNTER 6 (Contact) + 1 (Contactless) = 7 (Total) GENERAL AUTHENTICATE 59 (Contact) + 59 (Contactless) = 118 (Total) PUT DATA 66 (Contact) + 1 (Contactless) = 67 (Total) GENERATE ASYMMETRIC KEY PAIR 7 (Contact) + 1 (Contactless) = 8 (Total)

Table 5-3. List of Commands in Card Application Command and Number of Test Cases

The following assumptions have been made with regard to the PIV Card command interface test cases: A valid PIV Card is inserted into the contact reader or placed near a contactless reader.

A valid PC/SC connection exists between the test system and an instance of the reader.

No application is currently connected to the PIV Card Application.

No other contactless card is within the proximity of the contactless reader.

4 For PUT DATA, GET DATA, GENERAL AUTHENTICATE and GENERATE ASYMMETRIC KEY PAIR positive and negative tests, the number of test cases is based on the assumption that mandatory and optional PIV data objects and asymmetric keys are implemented. The number of tests may be less, if he card application under test does not implement all optional data objects and asymmetric keys.

After · SP 800-85A-4

This section provides conformance tests in the form of test assertions for the command set that is specified in ChapterSection 3, Part 2 of SP 800-73-3800-73-4 (PIV Card Application Card Command Interface) that the PIV Card Application is required to support. The test assertions are described through a test assertions template. The template provides placeholders for describing the purpose of the test, the preconditions required to exercise the test, the parameter values used in test invocation, and the expected results as well as the state of the PIV system (value of state variables), if any, that will be affected by the test run (post- condition). The conformance tests are run to validate the PIV Card Application. Interaction with the PIV Card Application takes place through the API of the driver that comes with the card reader. The list of commands in the PIV Card Application card command interface and the number of test cases,assertions derived from test assertionsSP in800-73-4 AppendixPart C2 are summarizeddemonstrated in Table 5-3. Card Application Command Number oftest Testcases Casesin (Appendix C) SELECT 5 (Contact) + 3 (Contactless) = 8 (Total) GET DATA 4 38 (Contact) + 34 (Contactless) = 72 (Total) VERIFY 7 (Contact) + 2 (Contactless) = 9 (Total) CHANGE REFERENCE DATA 7 (Contact) + 2 (Contactless) = 9 (Total) RESET RETRY COUNTER 6 (Contact) + 1 (Contactless) = 7 (Total) GENERAL AUTHENTICATE 59 (Contact) + 59 (Contactless) = 118 (Total) PUT DATA 66 (Contact) + 1 (Contactless) = 67 (Total) GENERATE ASYMMETRIC KEY PAIR 7 (Contact) + 1 (Contactless) = 8 (Total)

Table 5-3. List of Commands in Card Application Command and Number of Test Cases

The following assumptions have been made with regard to the PIV Card command interface test cases: A+ validThe PIV Card being tested (IUT) is inserted into the contact reader or placed near a contactless reader.

 + A valid PC/SC connection exists between the test system and an instance of the reader.

+ No application is currently connected to the PIV Card Application.

 + No other contactless card is within the proximity of the contactless reader.

4 For PUT DATA, GET DATA, GENERAL AUTHENTICATE and GENERATE ASYMMETRIC KEY PAIR positive and negative tests, the number of test cases is based on the assumption that mandatory and optional PIV data objects and asymmetric keys are implemented. The number of tests may be less, if he card application under test does not implement all optional data objects and asymmetric keys.