BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

B.1.4.1 Derived PIV Application Key References and Security Conditions of Use 965

NIST PIV and digital identity SP 800-157 Rev. 1 (Draft)
All changes in this version
first version loaded Appendix B Data Model and Interfaces for Removable or Wireless PKI-Based Cryptographic 840 part of B.1.4

Title

Derived PIV Application Key References and Security Conditions of Use 965

Control

966 967 968

969 970 971

972

973 974

975 976 977 978 979 980

981 982 983

984 985 Key references are assigned to keys and secrets of the derived PIV application. Table 8 of [SP800-78] and Table 4 of [SP800-73pt1] define the key reference values that SHALL be used on the derived PIV application interfaces with the following mappings:

Table 2. Mapping of Key Types

Derived PIV Key Type PIV Key Type

Derived PIV Activation Secret PIV Card Application PIN Activation Secret Unblocking Key PIN Unblocking Key Derived PIV Authentication Key PIV Authentication Key Derived PIV Token Management Key Card Management Key Digital Signature Key Digital Signature Key Key Management Key Key Management Key Retired Key Management Key Retired Key Management Key Derived PIV Secure Messaging Key PIV Secure Messaging Key

The key reference specifications in Sec. 5.1 of [SP800-73pt1] apply to the corresponding keys included in the derived PIV application (mapped per Table 2 ), except for the following:

• References to “PIV Card application” are replaced with “derived PIV application.”

• References in the “Security Condition for Use” column to “PIN or OCC” are replaced with “derived PIV activation secret.”