Page 1 of 1

secure channel initiation mode implicit

Posted: Sun Jan 29, 2017 8:44 am
by mikegigom
Hello, it's me again.

Can somebody here explain the mechanism of secure channel initiation on mode implicit? I already have a look at the specification, the introduction about GlobalPlatform initiation mode implicit is very simple.

So hope expert guide me how to do it.

Any help is appreciated.

Re: secure channel initiation mode implicit

Posted: Sun Jan 29, 2017 10:36 am
by tay00000
SCP 02 ? SCP 03 ? Which type ?

Re: secure channel initiation mode implicit

Posted: Mon Jan 30, 2017 9:18 am
by Crawford
The steps are much the same as the explicit, except there is not INIT-UPDATE/EXT-AUTH commands to deal with. When the first secured APDU is received (CLA = 0x84), you follow the process to generate session keys and verify the MAC. The card spec outlines how to generate a MAC with the session keys.

Re: secure channel initiation mode implicit

Posted: Tue Jan 31, 2017 1:46 am
by mikegigom
Crawford wrote:The steps are much the same as the explicit, except there is not INIT-UPDATE/EXT-AUTH commands to deal with. When the first secured APDU is received (CLA = 0x84), you follow the process to generate session keys and verify the MAC. The card spec outlines how to generate a MAC with the session keys.


Thanks very much for your time and answer.

Re: secure channel initiation mode implicit

Posted: Tue Jan 31, 2017 2:49 am
by Crawford
I am glad to be of assistance.