ISO/IEC 7816-8:2021

Identification cards — Integrated circuit cards — Part 8: Commands and mechanisms for security operations

This document specifies interindustry commands which can be used for security operations. This document also provides informative directives on how to construct security mechanisms with commands defined in ISO/IEC 7816‑4. The choice and conditions of use of cryptographic mechanism in security operations can affect card exportability. The evaluation of the suitability of algorithms and protocols is outside the scope of this document. It does not cover the internal implementation within the card and/or the outside world.

Cartes d'identification — Cartes à circuit intégré — Partie 8: Commandes et mécanismes pour les opérations de sécurité

General Information

• Status: Published
• Publication Date: 08-Aug-2021
• ICS: 35.240.15 - Identification cards. Chip cards. Biometrics
• Technical Committee: ISO/IEC JTC 1/SC 17 - Cards and security devices for personal identification
• Drafting Committee: ISO/IEC JTC 1/SC 17/WG 4 - Generic interfaces and protocols for security devices
• Current Stage: 9092 - International Standard to be revised
• Completion Date: 06-Feb-2024

Relations

• Amended By: ISO/IEC 7816-8:2021/Amd 1:2023 - Identification cards — Integrated circuit cards — Part 8: Commands and mechanisms for security operations — Amendment 1: Interoperability for the interchange of security operations using quantum safe cryptography
• Effective Date: 06-Jun-2022
• Revises: ISO/IEC 7816-8:2019 - Identification cards — Integrated circuit cards — Part 8: Commands and mechanisms for security operations
• Effective Date: 23-Apr-2020

Standards Content (Sample)

INTERNATIONAL ISO/IEC
STANDARD 7816-8
Fifth edition
2021-08
Identification cards — Integrated
circuit cards —
Part 8:
Commands and mechanisms for
security operations
Cartes d'identification — Cartes à circuit intégré —
Partie 8: Commandes et mécanismes pour les opérations de sécurité
Reference number
ISO/IEC 7816-8:2021(E)
©
ISO/IEC 2021

---------------------- Page: 1 ----------------------
ISO/IEC 7816-8:2021(E)

COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2021
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting
on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address
below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii © ISO/IEC 2021 – All rights reserved

---------------------- Page: 2 ----------------------
ISO/IEC 7816-8:2021(E)

Contents Page
Foreword .iv
Introduction .v
1 Scope .1
2 Normative references .1
3 Terms and definitions .1
4 Abbreviated terms . 2
5 Interindustry commands for security operations .3
5.1 General . 3
5.2 Generate asymmetric key pair command . 3
5.3 Perform security operation command . 7
5.3.1 General. 7
5.3.2 Compute cryptographic checksum operation .10
5.3.3 Compute digital signature operation .10
5.3.4 Hash operation .10
5.3.5 Verify cryptographic checksum operation .11
5.3.6 Verify digital signature operation .11
5.3.7 Verify certificate operation.12
5.3.8 Encipher operation .13
5.3.9 Decipher operation .13
Annex A (informative) Examples of operations related to digital signature .14
Annex B (informative) Examples of certificates interpreted by the card .20
Ann
...

INTERNATIONAL ISO/IEC
STANDARD 7816-8
Fifth edition
Identification cards — Integrated
circuit cards —
Part 8:
Commands and mechanisms for
security operations
Cartes d'identification — Cartes à circuit intégré —
Partie 8: Commandes et mécanismes pour les opérations de sécurité
PROOF/ÉPREUVE
Reference number
ISO/IEC 7816-8:2021(E)
©
ISO/IEC 2021

---------------------- Page: 1 ----------------------
ISO/IEC 7816-8:2021(E)

COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2021
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting
on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address
below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii PROOF/ÉPREUVE © ISO/IEC 2021 – All rights reserved

---------------------- Page: 2 ----------------------
ISO/IEC 7816-8:2021(E)

Contents Page
Foreword .iv
Introduction .v
1 Scope .1
2 Normative references .1
3 Terms and definitions .1
4 Abbreviated terms . 2
5 Interindustry commands for security operations .3
5.1 General . 3
5.2 Generate asymmetric key pair command . 3
5.3 Perform security operation command . 7
5.3.1 General. 7
5.3.2 Compute cryptographic checksum operation .10
5.3.3 Compute digital signature operation .10
5.3.4 Hash operation .10
5.3.5 Verify cryptographic checksum operation .11
5.3.6 Verify digital signature operation .11
5.3.7 Verify certificate operation.12
5.3.8 Encipher operation .13
5.3.9 Decipher operation .13
Annex A (informative) Examples of operations related to digital signature .14
Annex B (informative) Examples of certificates interpreted by the card .
...