00 87 00 00 LL GENERAL AUTHENTICATE to send off-card 7C LL 82 LL CC…CC application response; cryptogram length depends on AT key type Key Establishment with Internal Authentication Using ECC For details on the cryptograms, see “Key Establishment with Internal Authentication Using ECC.” Table : Internal Authentication with Session Key Agreement Using ECC Algorithm Command Response Comments 00.CB.3F.FF.05 GET DATA to retrieve card-certificate TT TT TT 5C.03.TT.TT.TT maps to the tag of the DO that contains the certificate of the card’s static public key. TT TT TT.LL.xx.xx….xx xx xx …xx maps to the card certificate. 00.88.00.00.LL INTERNAL AUTHENTICATE for card 7C.LL.85.LL.QQ…QQ authentication: QQ…QQ maps to QH and xx xx A0.LL 80 LL xx…xx xx xx xx xx xx xx maps to IDH for KDF. 7C.LL. MM…MM maps to the MacTag nn…nn maps to 82.LL.MM..MM A0 the nonce Nc. LL 81.LL.nn…nn
00 87 00 00 LL 7C LL 82 LL CC…CC GENERAL AUTHENTICATE to send off-card application response; cryptogram length depends on AT key type Key Establishment with Internal Authentication Using ECC For details on the cryptograms, see “Key Establishment with Internal Authentication Using ECC.” Table : Internal Authentication with Session Key Agreement Using ECC Algorithm Command Response Comments 00.CB.3F.FF.05 5C.03.TT.TT.TT GET DATA to retrieve card-certificate TT TT TT maps to the tag of the DO that contains the certificate of the card’s static public key. TT TT TT.LL.xx.xx….xx xx xx …xx maps to the card certificate. 00.88.00.00.LL 7C.LL.85.LL.QQ…QQ A0.LL 80 LL xx…xx INTERNAL AUTHENTICATE for card authentication: QQ…QQ maps to QH and xx xx xx xx xx xx xx xx maps to IDH for KDF. 7C.LL. 82.LL.MM..MM A0 LL 81.LL.nn…nn MM…MM maps to the MacTag nn…nn maps to the nonce Nc.