Page 1 of 1
secure channel initiation mode implicit
Posted: Sun Jan 29, 2017 8:44 am
by mikegigom
Hello, it's me again.
Can somebody here explain the mechanism of secure channel initiation on mode implicit? I already have a look at the specification, the introduction about GlobalPlatform initiation mode implicit is very simple.
So hope expert guide me how to do it.
Any help is appreciated.
Re: secure channel initiation mode implicit
Posted: Sun Jan 29, 2017 10:36 am
by tay00000
SCP 02 ? SCP 03 ? Which type ?
Re: secure channel initiation mode implicit
Posted: Mon Jan 30, 2017 9:18 am
by Crawford
The steps are much the same as the explicit, except there is not INIT-UPDATE/EXT-AUTH commands to deal with. When the first secured APDU is received (CLA = 0x84), you follow the process to generate session keys and verify the MAC. The card spec outlines how to generate a MAC with the session keys.
Re: secure channel initiation mode implicit
Posted: Tue Jan 31, 2017 1:46 am
by mikegigom
Crawford wrote:The steps are much the same as the explicit, except there is not INIT-UPDATE/EXT-AUTH commands to deal with. When the first secured APDU is received (CLA = 0x84), you follow the process to generate session keys and verify the MAC. The card spec outlines how to generate a MAC with the session keys.
Thanks very much for your time and answer.
Re: secure channel initiation mode implicit
Posted: Tue Jan 31, 2017 2:49 am
by Crawford
I am glad to be of assistance.