ISO/IEC 7816-8

Information technology - Identification cards - Integrated circuit(s) cards with contacts - Part 8: Interindustry commands for a cryptographic toolbox

Foreword

1 Scope

2 Normative references

3 Terms and definitions

3.1 secure messaging

4 Abbreviations and notation

5 Interindustry commands for a cryptographic toolbox

5.1 GENERATE PUBLIC KEY PAIR command

Table 1 - GENERATE PUBLIC KEY PAIR command-response pair

Table 2 - Generation control in P1

Table 3 - Status conditions in SW1-SW2

Table 4 - Public key data objects

5.2 PERFORM SECURITY OPERATION command

Table 5 - PERFORM SECURITY OPERATION command-response pair

Table 6 - Input templates

Table 7 - Input data objects

5.3 COMPUTE CRYPTOGRAPHIC CHECKSUM operation

Table 8 - Parameters and data fields for COMPUTE CRYPTOGRAPHIC CHECKSUM operation

5.4 COMPUTE DIGITAL SIGNATURE operation

Table 9 - Parameters and data fields for COMPUTE DIGITAL SIGNATURE operation

5.5 HASH operation

Table 10 - Parameters and data fields for HASH operation

5.6 VERIFY CRYPTOGRAPHIC CHECKSUM operation

Table 11 - Parameters and data fields for VERIFY CRYPTOGRAPHIC CHECKSUM operation

5.7 VERIFY DIGITAL SIGNATURE operation

Table 12 - Parameters and data fields for VERIFY DIGITAL SIGNATURE operation

5.8 VERIFY CERTIFICATE operation

Table 13 - Parameters and data fields for VERIFY CERTIFICATE operation

5.9 ENCIPHER operation

Table 14 - Parameters and data fields for ENCIPHER operation

5.10 DECIPHER operation

Table 15 - Parameters and data fields for DECIPHER operation

Annex A (informative) Examples of operations related to digital signature

A.1 Sequences of commands for managing a security environment

Table A.1 - Setting of security environment components

A.2 Sequences of commands for digital signature computation

Table A.2 - First example of digital signature scheme with appendix

Table A.3 - Second example of digital signature scheme with appendix

Table A.4 - Third example of digital signature scheme with appendix

Table A.5 - Fourth example of digital signature scheme with appendix

Table A.6 - Fifth example of digital signature scheme with appendix

A.3 Sequences of commands for digital signature verification

Table A.7 - First example of digital signature verification

Table A.8 - Second example of digital signature verification

Table A.9 - Third example of digital signature verification

Annex B (informative) Examples of certificates interpreted by the card

B.1 Data objects for card-verifiable certificates

Table B.1 - Interindustry data objects (examples) relevant for card-verifiable certificates

B.2 Self-descriptive card-verifiable certificates

Table B.2 - Self-descriptive card-verifiable certificate of a cardholder (example)

B.3 Non self-descriptive card-verifiable certificates

Table B.3 - Non-self-descriptive card-verifiable certificate of a cardholder (example)