Card Type Approval - EMVCo Type Approval CCD Level 1 and Level 2 Card Images Requirements ... ONLINE ONLY CRM: CCD application that can only go online and that cannot be set

© 2017 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries.

EMV®

Card Type Approval

CCD Level 1 and Level 2

Card Images Requirements

Version 4.3.e March 2017

EMV Card Type Approval – CCD Levels 1 & 2

Card Image Requirements v4.3.e Page i / iii

© 2017 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted

only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is

a registered trademark or trademark of EMVCo, LLC in the United States and other countries.

Legal Notice

The EMV

® Specifications are provided “AS IS” without warranties of any kind, and EMVCo

neither assumes nor accepts any liability for any errors or omissions contained in these Specifications. EMVCO DISCLAIMS ALL REPRESENTATIONS AND WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT, AS TO THESE SPECIFICATIONS. EMVCo makes no representations or warranties with respect to intellectual property rights of any third parties in or in relation to the Specifications. EMVCo undertakes no responsibility to determine whether any implementation of the EMV

® Specifications may violate, infringe,

or otherwise exercise the patent, copyright, trademark, trade secret, know-how, or other intellectual property rights of third parties, and thus any person who implements any part of the EMV

® Specifications should consult an intellectual property attorney before any such

implementation. Without limiting the foregoing, the Specifications may provide for the use of public key encryption and other technology, which may be the subject matter of patents in several countries. Any party seeking to implement these Specifications is solely responsible for determining whether its activities require a license to any such technology, including for patents on public key encryption technology. EMVCo shall not be liable under any theory for any party’s infringement of any intellectual property rights in connection with the EMV

®

Specifications.


Card Image Requirements v4.3.e Page ii / iii




Revision Log – Version 4.3.e

The following changes have been made to the document since the publication of

Version 4.3.c. Some of the numbering and cross references in this version have been updated to reflect changes introduced by the published bulletins. The numbering of existing requirements did not change, unless explicitly stated otherwise.

Incorporated changes described in the following Specification Updates:

Image A20a removed

Possible values of AIP of image A1 updated to reflect the fact that cardholder verification shall always be supported

Other editorial changes:

Miscellaneous editorial changes and typos in sections 5 and 6

Format of the document

Versioning policy of the present document:

Current version is 4.3.e, where 4.3.e follows the current EMVCo Card Type Approval – CCD Level 2 – Test Cases Specification [N6] version number.


Card Image Requirements v4.3.e Page iii / iii




Contents

1 Scope ............................................................................................................................. 1

2 Normative References .................................................................................................. 2

3 Notational Conventions ................................................................................................ 3

3.1 Abbreviations .......................................................................................................... 3

3.2 Terminology ............................................................................................................ 4

4 Card Images .................................................................................................................. 5

4.1 Introduction............................................................................................................. 5

4.2 Card Images A1 ..................................................................................................... 5

4.3 CA Public keys and ICC Private keys values ........................................................ 14

4.4 Other Card Images ............................................................................................... 27

5 Level 2 Options of a CCD Application ....................................................................... 39

5.1 Cards Images requested for all CCD Applications ................................................ 39

5.2 Cards Images requested by CCD options ............................................................ 39

6 Level 2 Test Cases applicable depending on the CCD Application options ........... 50

6.1 Tests to run for all CCD application ...................................................................... 50

6.2 Tests to run depending on the CCD options supported ........................................ 54

6.3 Non Regression tests on ‘not activated’ options: when option is supported but not used ..................................................................................................................... 66

7 Card Images for Level 1 Testing ................................................................................ 69


Card Image Requirements v4.3.e Page 1 / 83




1 Scope

The present document, ‘EMVCo Card Type Approval – CCD Level 1 & Level 2 Card

Images Requirements’, describes the set of Card Images that a Product Provider needs to provide to a laboratory for CCD Level 1 & Level 2 Functional evaluation. This document describes sets of Card Images; each set depends on the options that the CCD application to be tested supports. In each set, the quantities of physical cards to be provided are listed by Card Images. The intended audience for this document is CCD Product Providers and Laboratories.






2 Normative References

[N1] EMV Integrated Circuit Card Specification for Payment Systems – Book1 – Application Independent ICC to Terminal Interface Requirements

Version 4.3 – November 2011

[N2] EMV Integrated Circuit Card Application Specification for Payment Systems – Book2 – Security and Key Management


[N3] EMV Integrated Circuit Card Terminal Specification for Payment Systems – Book3 – Application Specification


[N4] EMV Integrated Circuit Card Terminal Specification for Payment Systems – Book 4 – Cardholder, Attendant, and Acquirer Interface Requirements


[N5] Specification Update Bulletin No. 41 – Corrections to Common Core Definitions

Third Edition November 2007

[N6] EMVCo Card Type Approval – CCD Level 2 – Test Cases

Version 4.3.e – November 2016

[N7] EMVCo Card Type Approval – Card Level 1 Electrical and Protocol – Test Cases

Version 4.3.a – October 2012

[N8] Specification Update Bulletin No. 47 – Support for Proprietary Authentication Data in CCD

First Edition, April 2006

[N9] Specification Update Bulletin No. 55 – Terminal Velocity Checking and CCD

First Edition, February 2007

[N10] Specification Update Bulletin No. 57 – MAC Algorithm for CCD Secure Messaging

First Edition, February 2007

[N11] Specification Update – Bulletin n°65, CPA Last Online Transaction Not Completed

First Edition, May 2008

[N12] Specification Update – Bulletin n°66, CCD setting of CDA performed in the CVR

First Edition, May 2008

[N13] Specification Update – Bulletin n°71, Change the status of the Presence of the Application Label element in the FCI of an ADF to mandatory

Second Edition, November 2009

[N14] Specification Update – Bulletin n°75, Terminal AID First Edition, November 2009






3 Notational Conventions

3.1 Abbreviations

SDA: Static Data Authentication

DDA: Dynamic Data Authentication

CDA: Combined Dynamic Data Authentication

ENC PIN: enciphered offline PIN

PDOL: CCD application requesting PDOL in GPO

BEFORE: CCD application supporting the according script before the second GEN AC

AFTER: CCD application supporting the according script after the second GEN AC

ADD SCRIPT: Additional script command not described in EMV

SMC: Secure Messaging for Confidentiality

SMI: Secure Messaging for Integrity

PSE: CCD application supporting PSE

LOG: Log file supported

ONLINE CAPABLE DETECT: CCD application able to detect a terminal type ‘online capable’

OFFLINE ONLY DETECT: CCD application able to detect a terminal type ‘offline only’

MACx: Size of the MAC supported

NO: means the according option must not be supported.

ONLINE ONLY CRM: CCD application that can only go online and that cannot be set differently.

Multi app: Card supporting several CCD applications.

Odd key: CDA or DDA or Enciphered PIN options using odd key length

Different key: CDA and Enciphered PIN options may run with different keys in the same application

Same key: CDA and Enciphered PIN options may run with the same key in the same application

IAD: Issuer Authentication Data different than the CCD one.






3.2 Terminology

CCD Application – An application loaded into an ICC compliant to [N1] to [N5] Specifications.






4 Card Images

4.1 Introduction

Not personalized (or not activated): This means that a particular CCD function (optional or not) must be not personalized for the purpose of a specific test. For example the CCD Application supports the DDA function (INTERNAL AUTHENTICATE command), but this function must not be personalized (no keys) or not activated (if the OS has function activation capabilities).

When a card image has a variable value defined, such as N, the value is specific only to that card image.

4.2 Card Images A1

This the default Card Image used to perform the CCD level 2 test Cases: All data of the CCD application loaded in this Card Image must be consistent. Data described could either be a mandatory setting or up to the CCD application provider (in this case, a recommended setting is proposed). Some data are related to card options and: If the card option is supported, when it shall be fully and correctly personalized in the Card Image A1. All applications listed in the ICS shall be activated and personalized on card image A1. If there is any limitation that precludes this, a card image A1 shall be provided for each of the additional configurations described in section A.7 of the ICS

Data Value Recommended

or Mandatory

value (R or M)

AID of application 1 (CCD application)

A American Express AID, or JCB AID, or a MasterCard AID, or a VISA AID shall be used once:

‘A000000025 00 00’,

‘A000000003 901001’,

‘A000000004 0000’

‘A000000065 0000’

M

AID of application 2

‘A000000003 901002’ (application must be fully personalized, except static data such a certificates, SSDA, …)

M (if Multiple AID are

supported)








M (if 3 AIDs are supported)



M (if 4 AIDs are supported)

Application Primary Account Number ‘PAN)

‘9761739001010010’ M

Application Primary Account Number ‘PAN) Sequence Number

‘00’ R

Application currency code

Based on the CCD application provider implementation

Application currency exponent


Application Discretionary Data


Application Effective Date

’051231’ R

Application Expiration Date

’161231’ (31st December 2016) M

Application File Locator (AFL)


Application Interchange Profile

Application Interchange Profile must be set according to the options supported (and activated):

’50 00’ for SDA and Cardholder Verification (offline PIN in enciphered or clear text)

’30 00’ for DDA and Cardholder Verification (offline PIN in enciphered or clear text)

’71 00’ for CDA, DDA, SDA and Cardholder Verification (offline PIN in enciphered or clear text)

…

M

Application Label CCD Test M

Application Preferred Name

CCD R

Application Priority Indicator

’01’ R

Application Reference Currency







Application Reference Currency Exponent


Application Transaction Counter

Any value -

Application Usage Control

’FF 00’ R

Application Version Number


Cardholder Name ‘Image X’, where X is the image number M

Card Risk Management

Issuer options should be set to allow the card to return the cryptogram type requested by the Test tool (AAC, ARQC or TC at 1

st GENERATE

AC and AAC or TC at 2nd

GENERATE AC when an ARQC has been returned at 1

st

GENERATE AC).

Case of online only Card that cannot be configured as described above, the following CRM must be set: online at 1

st GENERATE AC

(ARQC is returned at 1st GENERATE AC when

a TC is requested). For the 2nd

GENERATE AC, the behavior is the same as above

M

Cardholder Verification Method (CVM) List

CVM List must be set according to the options supported:

‘00000000 00000000 0100’ for Clear text PIN,

‘00000000 00000000 0400’ for Enciphered PIN,

’00000000 00000000 0103 0400’ for both PIN methods,

No CVM list: No PIN supported (or activated),

R

CDOL1 ‘9F0206 9F0306 9F1A02 9505 5F2A02 9A03 9C01 9F3704 9F3502 9F3403’

R

CDOL2 9108 8A02 9505 9F3704 9F0206 9F0306 (Note that tags 9F02 and 9F03 are ‘OPTIONAL’ and values are provided if supported)

R

Certification Authority Public Key

See section ‘CA Public keys and ICC Private

keys values’, Key 1

R

Certification Authority Public Key Index

‘62’ R

DDOL Unpredictable number ‘9F37’ M






Directory Discretionary Template


Dedicated File (DF) Name

Shall have the same value as the AID and this for each application

M

File Control Information (FCI) Template


File Control Information (FCI) Issuer Discretionary Data


Integrated Circuit Card (ICC) PIN Encipherment Public Key Certificate

Present if Enciphered PIN is supported and CCD application support different keys for PIN encipherment and for DDA (if another key is used then the recommended one, the CCD application provider must provide the ICC PIN Encipherment Public Key, as the certificate will be not coherent):

‘C1 9F 9A 3C 5F 05 C3 CE 90 20 B1 D5 A1 88 6F CE 2D A4 89 C6 8E 59 80 65 46 66 3C 8C D5 0F C5 B7 1C 94 A7 3F 43 39 C0 86 6F 7F 6F FB 6C 17 2E 2C B0 8E 98 00 2C 5E 1B 66 49 FC 6F E4 C9 0E 81 8A EB EC 7B D3 5F C9 0A 4C 6A 2B 74 CB 2E 51 46 9A FA E6 C3 AD C1 04 18 D3 E1 FF 14 4A 07 1C 68 2F 53 F7 BA CA 1B CF 72 1A 36 F2 A4 2D 27 99 DA E7 86 93 C7 50 37 FD E9 75 A7 E4 6C 9C 73 96 F2 F1’

R

Integrated Circuit Card (ICC) PIN Encipherment Public Key Exponent

Present if Enciphered PIN is supported and CCD application support different keys for PIN encipherment and for DDA:

‘03’

R

Integrated Circuit Card (ICC) PIN Encipherment Public Key Remainder

Not present R

Integrated Circuit Card (ICC) PIN Encipherment Private Key

Present if Enciphered PIN is supported and CCD application support different keys for PIN encipherment and for DDA:



R






Integrated Circuit Card (ICC) Public Key Certificate (512bits ICC key)

Present if DDA or CDA or Enciphered PIN (only if CCD application cannot support ICC PIN Encipherment Public key) are supported (if another key is used then the recommended one, the CCD application provider must provide the ICC Public Key, as the certificate will be not coherent):

‘BF 45 F8 74 E7 23 1E 7C 6D 49 92 54 92 AA A1 3C FD DB 8C 75 52 B0 A8 B2 E8 AE 25 E0 64 21 51 F8 8D DA CD 3C E4 7A C1 AF 28 82 BF 67 B1 44 17 AC 97 EA 00 2C 3E 2D B4 59 05 32 0D C1 85 C7 A1 9E 47 65 F6 BD F0 11 CC 21 E7 F9 BA 8C B3 1D A6 15 89 61 F0 A8 2F 22 13 7A F4 6E 7E C4 E0 14 00 58 0B AF 58 F3 49 E9 9E 4B 11 03 6D B0 FF 49 22 62 E4 6D 95 E6 C7 26 43 BB 39 EE F5 8E 9A 4E 6C 03’

R

Integrated Circuit Card (ICC) Public Key Exponent

Present if DDA or CDA or Enciphered PIN (only if CCD application cannot support ICC PIN Encipherment Public key) are supported:

‘03’

R

Integrated Circuit Card (ICC) Public Key Remainder

Not present R

Integrated Circuit Card (ICC) Private Key

Present if DDA or CDA or Enciphered PIN (only if CCD application cannot support ICC PIN Encipherment Public key) are supported:



R

Issuer Application Data


Issuer Action Code - Default

‘0000000000’ R

Issuer Action Code – Denial

‘0000000000’ R

Issuer Action Code – Online

‘0000000000’ R

Issuer Code Table Index


Issuer Country Code







Issuer Public Key Certificate (1024bits Issuer Key)

’38 06 C8 01 24 68 F1 E3 6C 89 C2 BE 0A B0 CC E4 EB 19 91 8E 1C EC FA 3B 9F DB B8 BA 14 16 E0 81 B1 77 16 CE 70 71 4A 2C 35 4E 79 0F FB 4C 25 7B C0 F6 64 0B E9 3E 43 A3 9B 44 B5 82 9D 4C C4 9D FC D3 C7 98 8C 28 58 50 3E 35 2B C9 69 BC 9A F8 8D 9E 90 27 09 9C 5B 62 3E BF 11 A1 99 54 94 16 96 01 E9 4D 68 5F CB 88 C2 76 C5 BE 9E BB 97 78 94 33 04 D6 57 33 B1 A7 DE 3B 20 A3 45 50 B1 D2 32 B4 3B 09 D1 83 F9 B2 02 20 21 10 16 C0 AA B5’

R

Issuer Public Key Exponent

‘03’ R

Issuer Public Key Remainder

‘8B 4E 84 02 F8 D0 21 45 60 6A 64 3F DC 52 14 76 AF 4E 50 6D’

R

Issuer specified Lower Limit for the number of transactions approved offline

This data object must be personalized in the default setting with the maximum value, else stated differently in the ‘Card Configuration’ field of a test Case.

M

Issuer specified Lower Limit for the cumulative amounts approved offline


M

Issuer specified Upper Limit for the number of transactions approved offline


M

Issuer specified Upper Limit for the cumulative amounts approved offline


M

Issuer Option: accept if unable to go online when Go Online on Next Transaction Was Set

The option ‘accept if an offline only terminal or the terminal is unable to go online when Go online on Next Transaction Was Set bit is set in CVR of the 1

st GENERATE AC ’ must be personalized as set in

the default setting else stated differently in the ‘Card Configuration’ field of a test Case.

M

Issuer Option: accept if unable to go online when Last Online Transaction Not Completed

The option ‘accept if an offline only terminal or the terminal is unable to go online when Last online Transaction Not Completed bit is set in CVR of the 1

st GENERATE AC’ must be personalized as set in

the default setting else stated differently in the ‘Card Configuration’ field of a test Case.

M






Issuer Option: CSU created by proxy

The option ‘Update Counter by CSU when created by Proxy’ must be personalized as set in the default setting else stated differently in the ‘Card Configuration’ field of a test Case.

M

Issuer Option: force online and accept if unable to go online when Issuer Authentication is failed on the previous transaction

The option ‘Force to go online at online capable terminal and accept if an offline only terminal or the terminal is unable to go online when Issuer Authentication failed bit is set in CVR of the 1

st

GENERATE AC’ must be personalized as set in the default setting else stated differently in the ‘Card Configuration’ field of a test Case.

M

Issuer Option: force online and accept if unable to go online when Issuer Authentication is not performed on the previous transaction

The option ‘Force to go online at online capable terminal and accept if an offline only terminal or the terminal is unable to go online when Issuer Authentication not performed bit is set in CVR of the 1

st GENERATE AC’ must be personalized as

set in the default setting else stated differently in the ‘Card Configuration’ field of a test Case.

M

Issuer Option: force online and accept if unable to go online when PIN Try Limit is exceeded

The option ‘Force to go online at online capable terminal and accept if an offline only terminal or the terminal is unable to go online when PIN Try Limit Exceeded bit is set in CVR of the 1

st GENERATE

AC’ must be personalized as set in the default setting else stated differently in the ‘Card Configuration’ field of a test Case.

M

Issuer Option: force online when Issuer Script Processing Failed

The option ‘Force to go online at online capable terminal (and accept if an offline only terminal or the terminal is unable to go online) when Issuer Script Processing Failed bit is set in CVR of the 1

st

GENERATE AC’ must be personalized as set in the default setting else stated differently in the ‘Card Configuration’ field of a test Case.

M

Issuer Option: Issuer Authentication is required to be performed to reset non velocity –checking indicators and counts

The option ‘Issuer Authentication is not required to pass for resetting non velocity-checking indicators and count’ must be personalized as not set in the default setting else stated differently in the ‘Card Configuration’ field of a test Case.

M






Issuer Option: Issuer Authentication is required to be performed to reset velocity checking counters

The option ‘Issuer Authentication is not required to pass for resetting velocity-checking counters’ must be personalized as not set in the default setting else stated differently in the ‘Card Configuration’ field of a test Case.

M

Issuer Option: Issuer Authentication required

The option ‘Issuer Authentication is required to be performed for the application to approve (TC) an online transaction’ must be personalized as not set in the default setting else stated differently in the ‘Card Configuration’ field of a test Case.

M

Issuer Option: Issuer Authentication to pass when performed

The option ‘Issuer Authentication required to pass when performed for the application to approve (TC) an online transaction’ must be personalized as not set in the default setting else stated differently in the ‘Card Configuration’ field of a test Case.

M

Issuer Option: New card

The option ‘new card’ must be personalized as not set in the default setting else stated differently in the ‘Card Configuration’ field of a test Case.

M

Language Preference


Last Online Application Transaction Counter (ATC) Register

To be personalized if supported by the application

Log Entry When supported, this option must be fully personalized, else stated differently in the ‘Card Configuration’ field of a test Case. Log Entry Maximum number must be equal to 6

M (when supported)

Log Format When supported, this option must be fully personalized (setting up to the CCD application provider), else stated differently in the ‘Card Configuration’ field of a test Case.

M (when supported)

Lower Consecutive Offline Limit

Not present M

Payment System Environment (PSE)

When supported, this option must be fully personalized in the default setting, else stated differently in the ‘Card Configuration’ field of a test Case.

M (when supported)

Personal Identification Number (PIN)

4 digits length, value ‘1234’ M






Personal Identification Number (PIN) Try Counter

Value is equal to PTL M

Personal Identification Number Try Limit (PTL)

3 M

RID (used in the Issuer Public Key Certificate)

For simplification reasons, the RID used to calculate the Issuer Public Key Certificate is always: ‘F0 00 00 00 03’

M

Service Code Based on the CCD application provider implementation

Signed Static Data Authentication (SSDA)

When supported, this option must be fully personalized in the default setting, else stated differently in the ‘Card Configuration’ field of a test Case:

‘13 43 8D 9D 5E 97 A7 90 7B FF 9D 47 17 2A 56 59 FF 34 FB B2 50 B4 2C 7B C6 EF 94 64 D8 73 31 FE 9D 87 29 51 89 00 C4 C1 97 09 81 F7 E6 94 C4 70 DD C0 1E 38 E9 3E 40 F5 76 FF F3 CE 76 31 42 2A 75 E6 1B BA 39 7F C2 73 16 13 80 68 8B 1E AF BE 4E 1E 1F 9A 8C 90 3E D0 63 B7 20 B5 5E 13 A3 9D 51 E1 CF BB 90 3D C4 C3 D6 54 18 0F 57 3F 36 D2 A7 A4 78 DB B4 E7 F8 0F 24 E7 5D 34 5E 0A 30 85’

R (when supported)

Static Data Authentication Tag List

‘82’ R

Track 1 Discretionary Data


Track 2 Discretionary Data


Track 2 Equivalent Data


Upper Consecutive Offline Limit

Not present M

Note: The data signed in offline CAM are the PAN and the PAN Sequence Number.






4.3 CA Public keys and ICC Private keys values

This section describes values of the CA Public keys and of the ICC and ICC PIN encipherment private keys values.

1/ 1152-bit CA Key

Component Value

Registered Application

Provider Identifier

(RID)

F0 00 00 00 03

Index 62

Modulus B7 36 73 3B 4C 0C FE 48 DD 53 E0 B0 AD FC 4F B2

63 ED 93 8D 5B B0 E8 67 D1 BE 36 42 1A 84 E5 BC

40 08 5C 7D 0E 44 72 F8 0D E8 AD 0A 30 93 BE 76

48 BA CC A8 8E 4B E6 68 F2 B1 75 52 7E 97 E7 61

10 41 66 EA 0F 17 AC EA A8 B4 99 B1 89 1E 2B 4C

27 38 57 CA B9 E0 FB E7 1A A7 E6 82 8C 88 18 D3

C6 3E 56 81 1C 43 D4 BF C3 B3 96 63 FE 1A E8 D4

37 3F 36 71 D1 76 18 53 BC B5 BD 47 E9 EA 4A EB

37 67 14 5E 49 65 A0 FA 9B 31 32 DE 65 2F E9 BF

Exponent 03

Secure Hash Algorithm-

1 Hash

D1 3E 45 E1 4C 70 09 9B 88 7D 11 39 B3 E9 15 7C

FB E5 11 EB

Component Length Value

CA Modulus (n) 144

('90')

B7 36 73 3B 4C 0C FE 48 DD 53 E0 B0 AD FC 4F B2

63 ED 93 8D 5B B0 E8 67 D1 BE 36 42 1A 84 E5 BC

40 08 5C 7D 0E 44 72 F8 0D E8 AD 0A 30 93 BE 76

48 BA CC A8 8E 4B E6 68 F2 B1 75 52 7E 97 E7 61

10 41 66 EA 0F 17 AC EA A8 B4 99 B1 89 1E 2B 4C

27 38 57 CA B9 E0 FB E7 1A A7 E6 82 8C 88 18 D3

C6 3E 56 81 1C 43 D4 BF C3 B3 96 63 FE 1A E8 D4

37 3F 36 71 D1 76 18 53 BC B5 BD 47 E9 EA 4A EB

37 67 14 5E 49 65 A0 FA 9B 31 32 DE 65 2F E9 BF

CA Public Exponent (e) 1 ('1') 03

CA Prime 1 (p) 72 ('48') DC 7A 40 58 AB 17 0B E4 9D 39 AC 67 82 3A 7A AB

8A 98 49 F2 B4 EB E9 B8 88 D4 27 52 D0 3F D5 F9

11 A9 8A E6 CA F5 D5 A7 62 B3 18 77 D9 84 61 B8

F1 F0 C0 03 ED 40 57 FD FC A7 87 42 AB 0B 3C 07

30 F3 D1 02 39 43 29 A9

CA Prime 2 (q) 72 ('48') D4 BB 2F 31 41 77 F0 69 7A 64 DA 94 08 98 A9 2C







70 0D 16 B9 BF 1A 52 0B D0 D4 2E F7 1B F7 8D 20

CC 52 9E AC B7 D9 DB C3 25 D4 0B CA ED DC 9A 8B

D5 82 A3 52 C1 02 25 0F 69 D4 17 60 4E 86 A6 51

FA E8 8C 39 9A 54 A9 27

CA Exponent 1 (d mod p-1) 72 ('48') 92 FC 2A E5 C7 64 B2 98 68 D1 1D 9A 56 D1 A7 1D

07 10 31 4C 78 9D 46 7B 05 E2 C4 E1 E0 2A 8E A6

0B C6 5C 99 DC A3 E3 C4 EC 77 65 A5 3B AD 96 7B

4B F5 D5 57 F3 80 3A A9 53 1A 5A 2C 72 07 7D 5A

20 A2 8B 56 D0 D7 71 1B

CA Exponent 2 (d mod q-1) 72 ('48') 8D D2 1F 76 2B A5 4A F0 FC 43 3C 62 B0 65 C6 1D

A0 08 B9 D1 2A 11 8C 07 E0 8D 74 A4 BD 4F B3 6B

32 E1 BF 1D CF E6 92 82 19 38 07 DC 9E 93 11 B2

8E 57 17 8C 80 AC 18 B4 F1 38 0F 95 89 AF 19 8B

FC 9B 08 26 66 E3 1B 6F

CA Coefficient 72 ('48') 25 9C 4F 6F C5 DF C4 DE D6 AD 19 35 52 68 09 A9

62 3C 71 FD B7 8C 30 F6 16 83 13 A8 C1 2A 03 0B

AC FF C1 4E BB DA EA B9 26 22 F2 8C 45 7D 5B 7C

71 E0 4E 16 E1 22 B8 C0 64 52 57 C1 E3 09 59 46

B0 69 99 02 66 BC 7B 42






2/ 1408-bit CA Key

Component Value

Registered Application

Provider Identifier

(RID)

F0 00 00 00 03

Index 63

Modulus AE AC 5D B7 F8 79 F5 C0 DA B6 CE 35 8C BD 6A A4

21 3D 13 E7 63 5B E3 88 6C CE 93 04 16 1D 7A 9E

9F F3 C2 64 12 95 7A 83 18 C9 06 02 94 6A 29 7B

F5 23 5F 7F DD 41 37 B3 76 2D 69 A2 5C 08 89 BF

83 9A 03 C6 39 2C BB 32 5F BC 87 B8 92 E9 C4 9E

8F 00 5F 34 54 D2 9C D9 C5 45 25 94 05 E9 09 F0

40 CC 28 77 B6 CE 9D D1 E0 2D 79 22 4C 8C 33 12

FB 1B 22 3B 26 41 49 34 D0 61 8B 7E 32 9C 25 03

9C 1D 98 68 33 76 63 78 04 A2 B2 6F 62 30 1E EA

D2 53 1D 5D 3E 62 BC 50 7E F8 8F FB 15 A0 10 1E

64 A6 EA 20 9A 72 DD A0 8F 4A DA F0 4E 1C 52 D9

Exponent 03

Secure Hash Algorithm-

1 Hash

6B BC 5D 5B 9B 68 62 65 8B F5 8E C9 66 C2 36 07

2F F1 9D 38


CA Modulus (n) 176

('B0')

AE AC 5D B7 F8 79 F5 C0 DA B6 CE 35 8C BD 6A A4

21 3D 13 E7 63 5B E3 88 6C CE 93 04 16 1D 7A 9E

9F F3 C2 64 12 95 7A 83 18 C9 06 02 94 6A 29 7B

F5 23 5F 7F DD 41 37 B3 76 2D 69 A2 5C 08 89 BF

83 9A 03 C6 39 2C BB 32 5F BC 87 B8 92 E9 C4 9E

8F 00 5F 34 54 D2 9C D9 C5 45 25 94 05 E9 09 F0

40 CC 28 77 B6 CE 9D D1 E0 2D 79 22 4C 8C 33 12

FB 1B 22 3B 26 41 49 34 D0 61 8B 7E 32 9C 25 03

9C 1D 98 68 33 76 63 78 04 A2 B2 6F 62 30 1E EA

D2 53 1D 5D 3E 62 BC 50 7E F8 8F FB 15 A0 10 1E

64 A6 EA 20 9A 72 DD A0 8F 4A DA F0 4E 1C 52 D9

CA Public Exponent (e) 1 ('1') 03

CA Prime 1 (p) 88 ('58') E8 82 68 38 F4 DC 4D 36 C9 22 97 0B D5 29 89 C5

53 A5 D2 E3 C7 75 75 72 9F 41 ED AB 31 CF 04 26

6F 5F 8B A3 E5 A0 F9 A2 E5 13 D0 AA 98 34 45 F7

14 C9 FA 49 60 2E F9 48 15 53 EF 92 9F 09 64 EB

78 AB 6B 31 1B 80 CF 49 C0 15 67 19 FE 8E CF 71

EB B2 86 76 AF 52 77 95

CA Prime 2 (q) 88 ('58') C0 52 17 FB 34 25 FE CB D8 74 23 AA 79 66 09 FD

85 CF E3 EA C7 5E AE 86 45 CE D9 0E 2B 60 CD D4

F8 31 C2 1B 33 46 86 A9 D2 73 F5 94 97 21 B7 87







82 62 2C 78 AD 50 3C 7C 75 79 BC 86 E4 DF 87 2F

EE AF 54 E6 BD 4A E7 5D F3 6D 99 3A 3D C9 2B 58

C0 AC 75 B9 10 5B 0D 35

CA Exponent 1 (d mod p-1) 88 ('58') 9B 01 9A D0 A3 3D 88 CF 30 C1 BA 07 E3 71 06 83

8D 19 37 42 84 F8 F8 F7 14 D6 9E 72 21 34 AD 6E

F4 EA 5D 17 EE 6B 51 17 43 62 8B 1C 65 78 2E A4

B8 86 A6 DB 95 74 A6 30 0E 37 F5 0C 6A 06 43 47

A5 C7 9C CB 67 AB 34 DB D5 63 9A 11 54 5F 34 F6

9D 21 AE F9 CA 36 FA 63

CA Exponent 2 (d mod q-1) 88 ('58') 80 36 BA A7 78 19 54 87 E5 A2 C2 71 A6 44 06 A9

03 DF ED 47 2F 94 74 59 83 DF 3B 5E C7 95 DE 8D

FA CB D6 BC CC D9 AF 1B E1 A2 A3 B8 64 C1 25 05

01 96 C8 50 73 8A D2 FD A3 A6 7D AF 43 3F AF 75

49 CA 38 99 D3 87 44 E9 4C F3 BB 7C 29 30 C7 90

80 72 F9 26 0A E7 5E 23

CA Coefficient 88 ('58') 72 40 F9 E0 E8 A5 49 C7 C6 C3 89 E9 44 CC B9 83

A9 A7 0A 54 4A D0 50 BF D3 63 B3 B9 C4 5F 13 5F

36 AB 11 47 BE E9 04 AD BA 66 3D BB AB 11 C5 A6

CB 7E AF 31 75 48 9D 2D 4E 62 4A 9E C5 71 5F 66

20 77 EE 23 27 CC 48 2D AC C6 19 6D 85 40 81 1B

73 49 7F ED 75 1B 30 16






3/ 512-bit ICC Private Key


ICC Modulus (n) 64 ('40') D3 C0 8C 16 15 E0 21 B7 4E 80 B3 C9 46 9D 09 E5

5A 1C 25 5B B3 79 57 A4 09 2A D9 04 49 E7 3C 03

0B 80 F7 3A 3D 1B 99 25 7C ED D6 18 02 AA 6A B1

ED 09 9F 75 83 31 E5 66 A5 0A 50 41 02 46 2C E9

ICC Public Exponent (e) 1 ('1') 03

ICC Private Exponent (d) 64 ('40') 8D 2B 08 0E B9 40 16 7A 34 55 CD 30 D9 BE 06 98

E6 BD 6E 3D 22 50 E5 18 06 1C 90 AD 86 9A 28 00

D1 2A F1 0C 9A 45 7C A9 55 30 98 6D AF 6C B4 25

1C 07 17 21 86 EB C7 46 D8 48 1B BA 66 3B C4 E3

ICC Prime 1 (p) 32 ('20') ED A4 8F 96 83 5D C4 40 87 49 C5 CE 21 BE A5 C7

45 15 1D 3C 09 D6 3F C4 46 D2 FC 53 25 0E DE C7

ICC Prime 2 (q) 32 ('20') E4 1B FE 10 D2 55 99 E6 F5 DB 2B A5 59 C8 B6 B2

FD E9 DF 87 2E F9 FA B8 19 CB 2A 56 43 DD A6 CF

ICC Exponent 1 (d mod p-

1)

32 ('20') 9E 6D B5 0F 02 3E 82 D5 AF 86 83 DE C1 29 C3 DA

2E 0E 13 7D 5B E4 2A 82 D9 E1 FD 8C C3 5F 3F 2F

ICC Exponent 2 (d mod q-

1)

32 ('20') 98 12 A9 60 8C 39 11 44 A3 E7 72 6E 3B DB 24 77

53 F1 3F AF 74 A6 A7 25 66 87 71 8E D7 E9 19 DF

ICC Coefficient 32 ('20') 97 CD A7 52 BF 83 DB B0 F1 E4 05 8F F2 F0 8E F7

F8 1A 4F C1 BE 94 6A 3F E8 9A F7 6B 5C CC EB BC






4/ 512-bit ICC PIN Encipherment Private Key


ICC PIN Modulus (n) 64 ('40')

9D 79 7D F5 A4 C8 ED ED 13 B0 93 A5 5D 24 A8 35

E2 B1 8E 04 96 4C F4 A7 E2 C0 14 73 DA 78 C2 49

CC 6B 88 F5 8D 8A 70 28 D6 F6 AD DD 5A BB 5B CA

BD 3F 0E 0D 0F DF 74 AD F4 E4 A5 5B D0 0D 56 B5

ICC PIN Public Exponent

(e)

1 ('1') 03

ICC PIN Private Exponent

(d)

64 ('40') 68 FB A9 4E 6D DB 49 48 B7 CB 0D 18 E8 C3 1A CE

97 21 09 58 64 33 4D C5 41 D5 62 F7 E6 FB 2C 30

27 1B ED 01 2D 27 05 70 16 70 0B 7E D0 5F 30 FB

50 DF 62 8D A7 A8 D8 0C B2 6F 3C 8F F1 52 97 6B

ICC PIN Prime 1 (p) 32 ('20') CF 16 9C 29 A2 71 A6 4F 38 F3 BA 7B 21 10 20 C5

68 0E 05 B3 CC E9 9E 50 98 E7 14 4E 20 2A 93 9D

ICC PIN Prime 2 (q) 32 ('20') C2 AB 09 4A 27 5E 41 B1 7C 5A E2 24 01 1C 71 8C

5B E1 F4 84 C7 78 92 4A 50 56 B6 35 C5 E6 DF F9

ICC PIN Exponent 1 (d mod

p-1)

32 ('20') 8A 0F 12 C6 6C 4B C4 34 D0 A2 7C 52 16 0A C0 83

9A B4 03 CD 33 46 69 8B 10 9A 0D 89 6A C7 0D 13


q-1)

32 ('20') 81 C7 5B 86 C4 E9 81 20 FD 91 EC 18 00 BD A1 08

3D 41 4D AD DA 50 61 86 E0 39 CE CE 83 EF 3F FB

ICC PIN Coefficient 32 ('20') 24 3E A3 37 02 E3 F4 4F 4D B0 E1 01 EA 6B 34 7F

DD A3 C6 71 FD 29 16 40 A6 E9 E8 E1 DF FB 8C E7






5/ 1152-bit ICC Key


ICC Modulus (n) 144

('90')

C9 7B EC BE 2A 3B 2F 83 D8 22 6F B1 55 C4 0E A8

5B AD CA 01 F4 C1 5D 52 10 AB 94 D0 28 78 61 BC

3B AC E1 AD DE C7 93 A0 D6 DA CB 25 AD 86 C2 8B

49 8F AD 4B 72 6F 4F 90 4E 79 D6 1E 1A 51 C8 7F

3D AF C1 6E 3B 27 09 1F 34 50 AC D6 66 83 C3 49

B9 10 9F 50 0C BE 45 B6 1E D4 54 FC 70 1D 60 9E

64 D1 52 09 09 FE 9D 01 88 4F AA 6B E9 A7 70 8E

0C D7 39 5D FE 65 BD A7 08 62 F3 0A C7 AF DE 00

85 E9 E6 73 05 51 D8 FA 49 11 16 68 F6 A3 36 0D


ICC Private Exponent (d) 144

('90')

86 52 9D D4 1C 27 75 02 90 16 F5 20 E3 D8 09 C5

92 73 DC 01 4D D6 3E 36 B5 C7 B8 8A C5 A5 96 7D

7D 1D EB C9 3F 2F B7 C0 8F 3C 87 6E 73 AF 2C 5C

DB B5 1E 32 4C 4A 35 0A DE FB E4 14 11 8B DA FF

7E 75 2B 9E D2 1A 06 13 9E 6E EB CA 7F D7 B4 4D

02 D0 4D 41 D3 46 3F 2D 64 2E F5 9A B6 B1 90 CE

B2 BB BC DB FE 2D 86 C7 A8 B1 D4 E7 A8 E8 5E 03

EB FA 61 65 A7 E5 53 D3 D3 2A 2A 8D BC 71 2C 53

12 0D 28 EA DD B8 16 20 73 08 70 E3 14 6C A8 D3

ICC Prime 1 (p) 72 ('48') ED 57 8E 70 74 41 71 6B A7 80 34 FA 19 E8 84 79

4D AF 91 81 BF 60 28 A3 E7 86 EA 68 D2 16 A1 D7

A3 F0 8F FD 02 64 DC 97 E1 DE BE 99 8C 4C 0C 1A

6B 21 03 B3 05 41 7A FD 09 C5 A0 D2 C1 5B 6F D3

05 86 3F 35 34 41 F3 AB

ICC Prime 2 (q) 72 ('48') D9 52 BC B6 32 7E C3 6A 8D 57 F6 73 35 EC 62 78

BA DE 53 12 9E B2 DE C4 71 30 CC 56 3A A3 B0 FE

67 54 5B 13 69 E6 06 F0 49 00 E8 AB F6 41 B3 CE

E0 82 AF 83 27 C4 A0 86 E1 10 88 3F F7 62 47 F6

96 FE 2D DF 23 BE 45 27


1)

72 ('48') 9E 3A 5E F5 A2 D6 4B 9D 1A 55 78 A6 BB F0 58 50

DE 75 0B AB D4 EA C5 C2 9A 59 F1 9B 36 B9 C1 3A

6D 4B 0A A8 AC 43 3D BA 96 94 7F 11 08 32 B2 BC

47 6B 57 CC AE 2B A7 53 5B D9 15 E1 D6 3C F5 37

59 04 2A 23 78 2B F7 C7


1)

72 ('48') 90 E1 D3 24 21 A9 D7 9C 5E 3A A4 4C CE 9D 96 FB

27 3E E2 0C 69 CC 94 82 F6 20 88 39 7C 6D 20 A9

9A 38 3C B7 9B EE AF 4A DB 55 F0 72 A4 2B CD 34

95 AC 75 02 1A 83 15 AF 40 B5 B0 2A A4 EC 2F F9

B9 FE C9 3F 6D 29 83 6F

ICC Coefficient 72 ('48') 9C 01 64 2A C6 7C 28 42 74 09 CB 3D 6C B6 21 2A

47 C2 B5 F8 B1 C4 9D 73 4B 97 4A F1 FC 97 D2 AA

BF B6 3E 24 9D B5 6A A4 75 62 58 86 BD E6 70 1B

A6 1F 99 CE 69 B6 07 B5 66 18 A5 48 72 D9 80 F2

FE EE 3F 67 30 2A 48 2D






6/ 1152-bit ICC PIN Encipherment Key


ICC PIN Modulus (n) 144

('90')

EA 82 3B 65 F2 1B 04 89 62 F3 59 1E C2 12 53 E8

41 2A 0E 2D FE 14 30 82 15 00 34 A4 8C 0D 10 B8

EA 12 1B A3 6F 4F FE 2C 23 CF 28 B2 CF 7D FD D4

22 35 E8 7C 19 A1 2F 59 8A CC BF 8C 4A 2D 95 35

A5 F6 68 0D C7 AB 0C A6 26 A7 C8 49 8B A8 C6 01

6D 7E 08 A1 4C 2D 7F FA C0 39 44 F1 16 71 38 81

00 EA D1 BF DF 43 5A 14 DD A5 07 0A D8 6F D3 74

D0 1D F9 AE 54 A9 51 68 D8 2D E3 C2 C2 05 33 3E

41 3C CA 68 B1 7D E5 91 DD 95 89 95 E8 5C F2 25


(e)

1 ('1') 03


(d)

144

('90')

9C 56 D2 43 F6 BC AD B0 EC A2 3B 69 D6 B6 E2 9A

D6 1C 09 73 FE B8 20 56 B8 AA CD C3 08 08 B5 D0

9C 0C 12 6C F4 DF FE C8 17 DF 70 77 34 FE A9 38

16 CE 9A FD 66 6B 74 E6 5C 88 7F B2 DC 1E 63 79

19 4E F0 09 2F C7 5D C2 D3 00 16 DC 4D 13 B4 C3

10 C0 06 21 80 D5 65 09 09 82 DF 33 3C B3 DB 7F

52 14 9B DE EF 9A 99 3B 7A DC 46 79 74 A1 35 C3

BB 39 B6 DE C8 DA D3 4C 9B 20 A7 1D 48 BB 15 EB

67 58 10 DB 2E 12 F6 54 65 C6 F8 5F 60 E5 20 6B

ICC PIN Prime 1 (p) 72 ('48') FA 6F B9 A3 7C B0 32 A3 D7 75 95 78 14 70 90 8C

BD A1 36 BD D5 2C 04 01 42 6F 7F ED 13 11 2C A3

45 4E 23 31 A4 42 4A 84 4C 99 B6 BA F3 3F 03 10

5F 5D 90 4C 8C 89 A3 16 B0 D5 A2 88 2A 36 E5 39

4C DB A7 6B 59 1E 92 39

ICC PIN Prime 2 (q) 72 ('48') EF B7 EC 5B 9B 5B 04 38 FC E8 69 F6 F6 7C D7 E0

74 53 BF 66 66 37 6B 40 C3 5C 68 04 64 CA 47 98

60 0C 7A 23 05 3B B8 4A EA AD B0 A5 34 22 11 65

90 1F 58 CA 48 62 EF 46 75 63 0E 97 C2 2A 8E D9

F8 0F 6D 9B 7D E6 AF 4D


p-1)

72 ('48') A6 F5 26 6C FD CA CC 6D 3A 4E 63 A5 62 F5 B5 B3

29 16 24 7E 8E 1D 58 00 D6 F4 FF F3 62 0B 73 17

83 89 6C CB C2 D6 DC 58 33 11 24 7C A2 2A 02 0A

EA 3E 60 33 08 5B C2 0F 20 8E 6C 5A C6 CF 43 7B

88 92 6F 9C E6 14 61 7B


q-1)

72 ('48') 9F CF F2 E7 BC E7 58 25 FD F0 46 A4 A4 53 3A 95

A2 E2 7F 99 99 7A 47 80 82 3D 9A AD 98 86 DA 65

95 5D A6 C2 03 7D 25 87 47 1E 75 C3 78 16 B6 43

B5 6A 3B 31 85 97 4A 2E F8 EC B4 65 2C 1C 5F 3B

FA B4 F3 BC FE 99 CA 33

ICC PIN Coefficient 72 ('48') 8F 39 27 64 51 DC CB 2F 97 AA 15 45 A2 F0 36 0E

1E 3F 2C 34 01 A5 01 10 61 1F B6 E1 08 18 3C 5D

76 A7 99 E0 A9 1F 67 B7 1A BB 4E 29 DB 85 ED 35

57 C5 A3 B3 C8 D0 08 68 6D DB 87 9A 29 35 A2 46

9C 9E 42 65 78 90 D2 CF






7/ 1024-bit ICC Key


ICC Modulus (n) 128

('80')

E0 EF 4E F8 4E C2 CC A5 C9 84 3E 2E 02 F3 12 B7

68 E8 5C 98 64 69 4D 87 D8 28 D4 98 24 71 97 38

43 07 B5 D5 CB 2E CE C3 5A FB 3B 57 E4 F3 A2 71

5A 0C 1E B8 D3 D7 1A 3C 9E EE 93 C3 DA AF 48 1A

6D A0 12 4D 79 72 75 8D 71 1A 5F 40 1A 48 50 EA

87 E6 E6 8F 6B C8 B6 B1 80 E2 D9 38 B9 B2 FC F6

EA DB A7 E2 FA 01 5C CA EA 65 8A 31 86 6B 7D 1C

72 A0 B0 B2 D7 A5 BB 5B B6 ED 2D 57 16 E2 2A 9B



('80')

95 F4 DF 50 34 81 DD C3 DB AD 7E C9 57 4C B7 24

F0 9A E8 65 98 46 33 AF E5 70 8D BA C2 F6 64 D0

2C AF CE 8E 87 74 89 D7 91 FC D2 3A 98 A2 6C 4B

91 5D 69 D0 8D 3A 11 7D BF 49 B7 D7 E7 1F 85 65

B3 9F 22 2A D4 21 17 93 1A F1 78 D5 2E 4A 13 00

9C 7D BD B6 F5 52 23 7C 6A EC 85 7C 09 2B CA 48

27 BE 7D E7 1D F1 17 08 1F AA FE 44 9E 7C FA A5

04 93 EF 9C 54 D9 34 99 61 59 0A B3 E2 C6 F9 FB

ICC Prime 1 (p) 64 ('40') F8 08 67 4C 89 7A 20 C2 BD 0D FF 81 36 0C 3F 3A

C8 48 8B 93 25 B9 B5 D0 1D 24 95 79 A5 79 88 2E

0E B2 3C C3 7D 24 68 5C E4 C1 F9 2E 51 24 AC CD

50 06 00 F5 2A 40 64 BE 49 1D 8B FC F4 46 CD 45

ICC Prime 2 (q) 64 ('40') E8 28 F7 C0 B1 C6 B1 6E 0B A2 2A 7F 1E CC F5 2E

D4 E1 BE 69 D6 13 CB A6 C3 5B 7B 85 06 77 C5 5C

A0 8B AE 44 CF F3 51 E1 D6 23 13 9C 47 8B 58 57

9B BC C8 53 2E 1F 87 B7 5B CA 11 4C 4E 70 E6 5F


1)

64 ('40') A5 5A EF 88 5B A6 C0 81 D3 5E AA 56 24 08 2A 27

30 30 5D 0C C3 D1 23 E0 13 6D B8 FB C3 A6 5A C9

5F 21 7D D7 A8 C2 F0 3D ED D6 A6 1E E0 C3 1D DE

35 59 55 F8 C6 D5 98 7E DB 69 07 FD F8 2F 33 83


1)

64 ('40') 9A C5 FA 80 76 84 76 49 5D 16 C6 FF 69 DD F8 C9

E3 41 29 9B E4 0D 32 6F 2C E7 A7 AE 04 4F D8 E8

6B 07 C9 83 35 4C E1 41 39 6C B7 BD 85 07 90 3A

67 D3 30 37 74 15 05 24 E7 DC 0B 88 34 4B 44 3F

ICC Coefficient 64 ('40') 9F 44 D8 9D 91 A0 E0 4E F0 93 77 DC D2 5E 76 AA

39 58 E1 C1 99 AC D0 36 0D 15 96 D7 B8 97 5C 69

C0 02 D2 46 DF 29 3F 24 CF 8F D4 83 53 2C 5A CE

61 A8 26 4F 59 04 10 3C 51 61 3A E5 A6 7A B4 B7








ICC PIN Modulus (n) 128

('80')

B1 FC 9B C0 5E 7F BD 51 41 C2 DA 28 93 59 F2 9E

9B BB 8E D1 0A C7 DA 7C 4A AA 6F EA C4 87 D4 7A

99 2F FD 77 9D 41 20 DA B7 27 C9 DA F9 57 CD 04

50 0B E3 4D 34 B0 4F 8D 57 B1 7D A3 43 AD 96 5C

17 D9 91 56 0A 9E B1 81 DD 91 7B 02 AF BA 9A 3D

C1 12 71 9A 4F B1 56 F6 E5 A5 46 42 D9 05 B7 2C

5B D8 D4 E0 E5 24 E7 81 A7 90 07 92 20 D3 A3 CC

EB 8D 96 06 32 CB 01 6A F4 DF 8C 9A 73 B2 09 87


(e)

1 ('1') 03


(d)

144

('90')

76 A8 67 D5 94 55 28 E0 D6 81 E6 C5 B7 91 4C 69

BD 27 B4 8B 5C 85 3C 52 DC 71 9F F1 D8 5A 8D A7

10 CA A8 FA 68 D6 15 E7 24 C5 31 3C A6 3A 88 AD

8A B2 97 88 CD CA DF B3 8F CB A9 17 82 73 B9 91

9D 76 ED 05 FD E3 62 FB AE 58 EE 71 C8 68 9D 41

38 47 35 47 BB CE A3 1E 40 4B 03 9A B4 CA 23 E2

58 E8 1D 6C 08 DC 12 66 3D E4 40 94 FC C1 E3 59

58 60 85 1F 73 7A 96 57 6C A0 13 B0 3C 09 71 BB

ICC PIN Prime 1 (p) 64 ('40') E2 5D 06 6E CC 18 20 AD 75 E8 14 3B 91 91 52 79

F8 22 DA 36 23 B1 11 F2 CE FE FA F3 EB B0 AE 0C

C7 66 0C 95 35 69 25 99 11 C5 EC 37 84 A0 AE 01

7E EE C8 A3 38 A9 81 97 39 08 5A C3 F9 79 4A E3

ICC PIN Prime 2 (q) 64 ('40') C9 4A 27 5E 41 B1 7C 5A E2 24 01 1C 71 8C 5B E1

F4 84 C7 78 92 4A 50 56 B6 35 C5 E6 DE 25 D3 4C

0F 16 9C 29 A2 71 A6 4F 38 F3 BA 7B 21 10 20 C5

68 0E 05 B3 CC E9 9E 50 98 E7 14 4E 20 2A 94 0D


p-1)

64 ('40') 96 E8 AE F4 88 10 15 C8 F9 45 62 D2 61 0B 8C 51

50 17 3C 24 17 CB 61 4C 89 FF 51 F7 F2 75 C9 5D

DA 44 08 63 78 F0 C3 BB 61 2E 9D 7A 58 6B 1E AB

A9 F4 85 C2 25 C6 56 64 D0 B0 3C 82 A6 50 DC 97


q-1)

64 ('40') 86 31 6F 94 2B CB A8 3C 96 C2 AB 68 4B B2 E7 EB

F8 58 84 FB 0C 31 8A E4 79 79 2E 99 E9 6E 8C DD

5F 64 68 1B C1 A1 19 8A 25 F7 D1 A7 6B 60 15 D8

F0 09 59 22 88 9B BE E0 65 EF 62 DE C0 1C 62 B3

ICC PIN Coefficient 64 ('40') 9B CF 39 29 A1 10 C5 29 88 75 C6 74 A1 47 0E D3

C7 81 8F C1 B9 DC 83 CF CA 33 1F 01 EA E0 48 69

14 55 30 F2 67 F9 B9 6B 69 5C 94 A6 80 D6 B7 21

7B CC B9 CF F9 AA CC 1A 9F 39 5E 04 20 04 1B 08






9/ 768-bit ICC Key


ICC Modulus (n) 96 ('60') E9 29 C2 73 AF 6E 5F 02 9E F3 E1 BA 56 CA E3 AF

35 5D AD BB 9A D6 28 2D A5 0D 44 B0 04 D5 C0 59

B0 89 B4 A5 81 52 11 B3 1B 15 CC 2D 95 29 C2 49

93 95 54 DB 97 10 19 09 8F 03 A4 67 CB D5 7F 47

2F 8B CB B7 C0 F1 70 82 77 F4 37 F4 15 88 67 69

81 F9 F4 5D C1 7E 60 A7 60 E7 FE A0 59 95 AA CF


ICC Private Exponent (d) 96 ('60') 9B 71 2C 4D 1F 9E EA 01 BF 4D 41 26 E4 87 42 74

CE 3E 73 D2 67 39 70 1E 6E 08 D8 75 58 8E 80 3B

CB 06 78 6E 56 36 B6 77 67 63 DD 73 B8 C6 81 85

1C 99 F5 F0 1D 92 38 1C 8F DF 0A CF 11 68 D2 26

CC 5C C7 C8 3E 3F E4 64 83 22 F1 D3 35 83 9C 1B

67 FC EE 81 72 A9 7A 24 7D 88 20 5B 91 80 A9 4B

ICC Prime 1 (p) 48 ('30') F7 E2 E8 00 3F 02 C4 D6 DF 7E 70 BB 50 F3 34 71

69 DC 83 D3 20 A0 C3 5D E0 78 75 01 42 87 57 7C

55 0F BD F2 AE 1F 46 E5 87 98 98 19 A2 9C 91 69

ICC Prime 2 (q) 48 ('30') F0 CB 7B F3 2B B2 00 07 D7 B6 A3 75 E0 C5 0F 9B

93 24 1C 38 42 F0 D6 8D D2 C7 58 36 02 BB A5 C4

10 EE D0 A8 E7 60 E2 8B 1D 03 35 FD 5C B8 1B 77


1)

48 ('30') A5 41 F0 00 2A 01 D8 8F 3F A9 A0 7C E0 A2 22 F6

46 93 02 8C C0 6B 2C E9 40 50 4E 00 D7 04 E4 FD

8E 0A 7E A1 C9 6A 2F 43 AF BB 10 11 17 13 0B 9B


1)

48 ('30') A0 87 A7 F7 72 76 AA AF E5 24 6C F9 40 83 5F BD

0C C2 BD 7A D7 4B 39 B3 E1 DA 3A CE AC 7D 19 2D

60 9F 35 C5 EF 95 EC 5C BE 02 23 FE 3D D0 12 4F

ICC Coefficient 48 ('30') 03 6B B7 66 71 99 87 D8 B6 B7 D4 DE 34 F3 13 4E

04 81 CA B6 91 35 A0 F9 4F C8 55 2C E5 4C B8 EB

AA 1D 0E F4 89 09 C6 A1 A0 69 A8 11 42 45 6F BD








ICC PIN Modulus (n) 96 ('60') C8 BC 15 10 B2 A9 7B 12 3D 6A 38 F7 6E 11 AA 0F

7C E2 DB 93 FD FA B8 E6 A9 46 89 D6 D3 AD 11 A9

6E B5 F3 7C 86 ED 60 26 A2 B6 EE CD 48 A7 41 4E

28 AA 69 50 ED 99 6E 29 81 56 EF 29 75 74 DD 2A

D9 29 26 0B 7C E5 29 56 5B DA AE 1F 18 BE A8 49

EA 58 50 5D D2 68 5D 94 CA EB ED 46 47 B0 88 3B


(e)

1 ('1') 03


(d)

96 ('60') 85 D2 B8 B5 CC 70 FC B6 D3 9C 25 FA 49 61 1C 0A

53 41 E7 B7 FE A7 25 EF 1B 84 5B E4 8D 1E 0B C6

49 CE A2 53 04 9E 40 19 C1 CF 49 DE 30 6F 80 DD

97 51 17 95 A9 88 F5 73 39 46 42 1C 7D 22 D9 A4

EB F3 10 AB 2E 8B 70 BD 71 2F C5 65 1D 25 DE E3

C5 BA 97 3A 9B BC 4F D0 C6 BF 6E CF EA 16 11 BB

ICC PIN Prime 1 (p) 48 ('30') EB 40 C3 5C 68 04 64 CA 47 98 60 0C 7A 23 05 3B

B8 4A EA AD B0 A5 34 22 11 65 90 1F 58 CA 48 62

EF 46 75 63 0E 97 C2 2A 8E D9 F8 0F 6D 9B 80 D5

ICC PIN Prime 2 (q) 48 ('30') DA 70 02 94 07 47 99 32 63 D5 2B F2 3F 9D 91 77

BE F1 A2 5D 06 6E CC 18 20 AD 75 E8 14 3B 91 91

52 79 F8 22 DA 36 23 B1 11 F2 CE FE FA F3 EC CF


p-1)

48 ('30') 9C D5 D7 92 F0 02 ED DC 2F BA EA B2 FC 17 58 D2

7A DC 9C 73 CB 18 CD 6C 0B 99 0A BF 90 86 DA EC

9F 84 4E 42 09 BA 81 71 B4 91 50 0A 49 12 55 E3


q-1)

48 ('30') 91 A0 01 B8 04 DA 66 21 97 E3 72 A1 7F BE 60 FA

7F 4B C1 93 59 9F 32 BA C0 73 A3 F0 0D 7D 0B B6

36 FB FA C1 E6 CE C2 76 0B F7 34 A9 FC A2 9D DF

ICC PIN Coefficient 48 ('30') CA 1A B8 39 2C 93 A5 FB 66 47 CB D8 8F E6 64 5D

03 DE 25 74 D8 7F 79 7B 68 72 5C B4 21 7C 35 E9

71 5A 81 E6 30 15 C9 A4 AB 2D 25 EF 8E 06 9F 2D








ICC Modulus (n) 125

('7D')

C1 6E 29 29 46 49 8F 7A B9 1C BB 37 BF 19 DD 78

82 3A 85 08 10 3B C7 2B 94 1D 84 88 32 EB 50 E3

CD F0 DB C8 B2 09 AC CC AA 31 41 B6 2C 7E 81 A9

E8 55 88 B4 F9 A5 A3 49 34 F5 7F FB D5 47 B1 22

ED 56 3E B1 E8 41 7C D3 E0 F6 DF F3 05 21 C5 D1

7D 00 91 D1 CF CD 23 C2 59 D7 E3 2B 82 74 EF 7A

29 84 19 0E 2B C0 87 4F 41 7F 50 36 22 0B 07 65

E6 35 B8 B5 13 0E A2 92 08 94 C7 06 69

ICC Public Exponent (e) 3

('03')

010001


('7D')

9D 69 5E 15 E3 72 A4 50 E5 A9 7C 07 8C 7D 2A BE

91 E7 0D B1 2C DA 23 90 FD F8 5C E2 79 E3 06 46

5C FC A5 DF AD AE 31 F1 B1 E4 63 EA DC F5 6B E5

2E D8 6C BD 85 16 F1 75 A1 F8 D2 83 C9 62 CD 20

9D 07 DA 76 05 74 DF 6F 6D 99 E1 4D 30 20 CE 48

83 AD A3 4A DD C0 08 A1 23 33 C5 86 F3 E4 65 BD

67 0B FF 29 04 FC 65 73 1F 0C 2C 0A C3 12 8A 8B

77 0F 4C 2B A6 B6 D9 2D 6F 97 68 AC 10

ICC Prime 1 (p) 63 ('3F') 0E 2C 90 C6 67 66 E3 1E 30 E5 CE 82 20 47 21 44

D2 B6 FC 4D 73 BA CD 6F 0E 51 1A C0 0A DD 7E 73

1B 66 CD EB 4E C5 DE AA 8B B1 43 22 61 46 31 35

E0 05 D9 C9 D0 5F DA 32 AF D7 0C 06 64 90 03

ICC Prime 2 (q) 63 ('3F') 0D A5 92 06 76 05 F3 A0 5A CE FB 79 49 01 D2 8A

A0 AD 90 B8 AA 35 84 FA 43 AB 9B DE 9C D5 EE 9A

2D D2 11 4F CC E5 28 73 AE 13 BB 65 95 88 CD 77

64 77 63 55 42 FB 2C 4D 9C D8 F2 99 A2 72 23


1)

63 ('3F') 02 3E 7C 0D 6D 81 94 A3 CB 0A 17 4F F2 DC 50 20

1D 5C 6B 45 B7 F4 F3 61 89 DA BD 69 7A 4E E7 1E

42 50 5C 79 CC D6 F7 11 F9 5B EF 4D 1A 29 8A D1

04 CE E8 54 53 71 59 92 7C D4 87 4A DB D1 11


1)

63 ('3F') 09 63 8D 58 B6 A0 97 A2 0E 77 F3 19 D9 B9 D0 41

A2 14 67 CA 35 08 87 49 AB 7F 08 C9 1A BC 30 E1

90 7E C3 7C 54 AA A0 AF 1D E7 E3 79 1B 6D 38 77

58 FE AE AF BD 5A 93 7B 7E 5A E0 66 05 16 63

ICC Coefficient 63 ('3F') 0D 36 5E 3E 6C 64 EC 91 01 99 1C F4 5D 9B A3 7B

D3 A8 9B E0 07 C5 B1 38 2E D4 5B E7 ED 61 83 81

DB 81 74 D7 45 E8 C4 C3 14 3E 25 55 62 B9 C1 62

A9 92 2D BC F6 C6 55 EA D7 D6 7E CA C5 06 AC






4.4 Other Card Images

This section describes the other card images that are requested to run the test cases, depending on the ICS.

Image Number Differences from the default configurations

A1 (A37.3) None

A1a AID is ‘A000000003 901001’

A1b AID is ‘A000000004 0000’

A1c AID is ‘A000000065 0000’

A2 PSE not personalized (or not activated)

A3 PDOL which contains amount (tag 9F02)

A4 CCD application personalized with ICC Keys length 1152 bits:

In case CCD application is able to support longer keys, vendor must provide the card image A4 with maximum keys length personalized according to ICS questions L2.6.1 to 4, L2.8.1, L2.8.2, L2.9.1 and L2.9.2 (depending on the options supported)

CA Public Key Index (1408 bits): ‘63’ (for CA key see section

‘CA Public keys and ICC Private keys values’, Key 2)

When DDA or CDA or enciphered PIN (only when different keys from DDA or CDA are not supported) are supported:

o ICC Public Key Certificate: 5C A4 9A 19 A2 E2 E0 71 06 AA C8 1F B9 3C 18 B5 A8 39 8F 30 F9 94 70 CD E1 8D 07 F4 B9 89 47 A2 4F 06 D2 99 B9 6C FA 35 A5 EA F9 2A 59 36 38 25 A7 3A 42 BC D7 C2 3F C9 8E A7 16 C1 98 0F FE E4 E9 9D D3 57 BD 98 CB 31 C0 A8 D6 0B 33 EC B1 BA 13 3E 42 71 07 B4 C5 3B 43 D5 C4 F9 AD FC 45 AD 72 CF CC EE EE A4 32 79 7A 17 96 71 C7 7F 38 7E 42 D9 20 EB 56 47 E2 5E 37 4A E5 2E 59 22 CB 68 32 34 24 B7 21 E4 5A 79 21 6D 9A 65 3B 89 07 08

o ICC Public Key Exponent: ‘03’

o ICC Public Key Remainder: ‘9D 01 88 4F AA 6B E9 A7 70 8E 0C D7 39 5D FE 65 BD A7 08 62 F3 0A C7 AF DE 00 85 E9 E6 73 05 51 D8 FA 49 11 16 68 F6 A3 36 0D

o ICC Private Key: see section ‘CA Public keys and ICC

Private keys values’, Key 5

When Enciphered PIN is supported (with different keys from DDA or CDA):

o ICC PIN Encipherment Public Key Certificate: 28 EC 33 C9 75 DA 24 62 40 86 5C 0D D8 3E 70 BE 73 E7 80 0C D5 9D 98 D2 E2 41 6C 7A 96 9C 90 60 FB 13 FF F4 C2 B1 68 2C 29 70 D1 09 7C 05 18 B4 F7 00 E2 31 8D 41 1B 60 2C 46 D3 7A 30 5B F4 44 70 59 05 34 C1 E0 40 21 DB AE DB 53 65 89 65 24 D3 C9 D2 4C 30 CD 9C FE D4 C5 8A 19






DF BC 10 F5 53 16 2E CB 8B 65 46 FD D9 8A 6A 58 79 23 57 AA EC 80 88 F6 C3 56 A5 02 2F D3 EF 78 D8 38 C6 0A 68 1C A4 D8 DD 0E 78 F6 4D E2 26 1C 2C FB 74 EB

o ICC PIN Encipherment Public Key Exponent: ‘03’

o ICC PIN Encipherment Public Key Remainder: 5A 14 DD A5 07 0A D8 6F D3 74 D0 1D F9 AE 54 A9 51 68 D8 2D E3 C2 C2 05 33 3E 41 3C CA 68 B1 7D E5 91 DD 95 89 95 E8 5C F2 25

o ICC PIN Encipherment Private Key: see section ‘CA Public

keys and ICC Private keys values’, Key 6

When SDA or DDA or CDA or Enciphered PIN are supported:

o Issuer Public Key Certificate (1152 bits): ‘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’

o Issuer Public Key Exponent: ‘03’

o Issuer Public Key Remainder: ‘10 07 7D 15’

When SDA is supported: Signed Static Data Authentication: C0 63 47 22 66 6F CC 01 08 27 3F 2E BE 28 4A 48 AA AC 83 78 58 43 48 38 E2 90 3A 7F B1 43 36 97 F2 E6 E7 C1 D3 81 09 2E 16 A8 84 2E 50 D1 96 03 0E 79 77 D3 16 6E 06 BC AD 31 45 75 D2 17 91 3F FE 76 7E 3D BF F9 F1 E4 E7 07 92 2D 82 18 E7 44 B5 6B 4A FF 9B 81 DB 4C 20 17 B7 8C A7 1D 5F D4 9E D5 21 88 BB 12 6E 10 CC CB C3 56 5C B5 27 E5 DF 60 C2 5D 69 EF BC 2F 9E 7D 97 45 39 37 B4 18 4E 3A 35 F4 78 A7 E5 AD 79 79 F7 C6 43 BF DB A5

A4a CCD application personalized with ICC Keys length 1024 bits:




o ICC Public Key Certificate: 2E 4A D5 24 77 84 95 AD 11 6C D3 39 65 83 21 7B C8 1A 0E 18 97 D4 6B 00 6B 37 B9 6F F0 5C AB 59 E3 51 9E AA 4E BE EE F7 16 07 41 EC 88 CE 6C E1 74 78 DA 9F B4 2D CE 80 0D 31 52 41 09 51 4A 94 1D EC 6B A1 D6 DE EA 09 7A 2A 5F B0 C0 87 22 46 92 B3 CC 28 D6 06 35 C9 21 5F DC 9C A8 A6 24 F0 94 45 1A 80 42 47 24 6D EA BD AC 31 36 17 2A 77 6D 48 4B 37 FC DC 26 73 6B 89 A3 2D 68 9C F2 83 61 0D A0 FD






DA C2 1C 6A DD 14 FB BF AC C8 5D 03


o ICC Public Key Remainder: 5C CA EA 65 8A 31 86 6B 7D 1C 72 A0 B0 B2 D7 A5 BB 5B B6 ED 2D 57 16 E2 2A 9B




o ICC PIN Encipherment Public Key Certificate: 79 B1 19 38 26 A5 FE C4 53 85 F1 29 50 53 E7 33 91 C0 E6 75 92 6B CC C6 E6 33 C9 0A 71 BB E7 79 53 1E A2 E9 0D D2 75 7C 06 C1 11 DD 55 59 9B 68 35 4E 2A B2 71 64 0F 43 86 D9 48 E8 61 07 58 C2 6B 16 3A 5D 31 30 67 54 01 30 48 6C 4C C2 9E F6 B3 0A 97 D0 66 B9 41 A2 DC AE 61 28 6D F6 48 B7 58 9E 18 29 88 C1 AF FE 80 5C C5 DD 3B AB DC 83 8F 4C FD 8F A7 EA 52 C3 E3 0B AD 41 20 8C B9 ED 4A A6 50 C4 19 22 E1 CF 4B C7 BA 3A 9C D8 BD 96


o ICC PIN Encipherment Public Key Remainder: ‘E7 81 A7 90 07 92 20 D3 A3 CC EB 8D 96 06 32 CB 01 6A F4 DF 8C 9A 73 B2 09 87’



When SDA or DDA or CDA or Enciphered PIN are supported:

o Issuer Public Key Certificate (1152 bits): ‘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’



When SDA is supported: Signed Static Data Authentication: C0 63 47 22 66 6F CC 01 08 27 3F 2E BE 28 4A 48 AA AC 83 78 58 43 48 38 E2 90 3A 7F B1 43 36 97 F2 E6 E7 C1 D3 81 09 2E 16 A8 84 2E 50 D1 96 03 0E 79 77 D3 16 6E 06 BC AD 31 45 75 D2 17 91 3F FE 76 7E 3D BF F9 F1 E4 E7 07 92 2D 82 18 E7 44 B5 6B 4A FF 9B 81 DB 4C 20 17 B7 8C A7 1D 5F D4 9E D5 21 88 BB 12 6E 10 CC CB C3 56 5C B5 27 E5 DF 60 C2 5D 69 EF BC 2F 9E 7D 97 45 39 37 B4 18 4E 3A 35 F4 78 A7 E5






AD 79 79 F7 C6 43 BF DB A5

A4b CCD application personalized with ICC Keys length 768 bits:

CA Public Key Index: ‘62’ (for CA public key see section ‘CA

Public keys and ICC Private keys values’, Key 1)


o ICC Public Key Certificate: 8F 45 A4 04 F5 33 2D CA 13 13 F4 DB CA EC E7 B9 60 A3 D4 54 F5 38 C3 0B 59 37 46 03 FB C8 23 46 8C CF E2 ED 44 4F 17 69 E3 D7 BD 0F A5 B2 07 7F B9 10 A9 AC 3B F3 3B C2 34 C5 3E 8E CE C3 44 7A 4B 05 DC 19 AC BD BD AE BE 22 BF 77 DC A6 8B 40 7F 23 EE A4 AC C1 2E AD 02 66 1E E3 23 D0 DE 68 84 1C 9B C9 0D 21 05 9E 0C D6 5F 08 75 4B 27 74 C8 08 DC 9D 06 C3 C5 BC 62 4F E5 38 F8 C4 40 21


o ICC Public Key Remainder: ‘60 A7 60 E7 FE A0 59 95 AA CF’




o ICC PIN Encipherment Public Key Certificate: ‘4A 34 98 17 37 36 F2 51 7E BA 58 35 12 C6 E5 48 7B FA 90 0D CD E0 3A A4 07 E3 DB FA 8B 37 4F B6 71 3B 00 47 98 3E 5C 09 5E DD 3D 14 D8 71 21 09 5E 28 55 3A BB B6 FE 99 DE 2C 58 48 79 9B 32 B1 29 00 F3 01 B1 57 8B C7 CD 0D CA C6 DD 2B CA 31 12 6A B1 3D D3 0F 14 DC C9 56 85 D6 D1 F6 97 BE 2A EC FF AF 26 ED 36 06 8D 04 07 80 1F 03 E8 B4 FE FD 4C 59 0A C6 F9 CF 5F 4C 3E F9 D7 4F CA 7D’


o ICC PIN Encipherment Public Key Remainder: ‘5D 94 CA EB ED 46 47 B0 88 3B’



When DDA or CDA or Enciphered PIN are supported:

o Issuer Public Key Certificate (1024bits): ‘38 06 C8 01 24 68 F1 E3 6C 89 C2 BE 0A B0 CC E4 EB 19 91 8E 1C EC FA 3B 9F DB B8 BA 14 16 E0 81 B1 77 16 CE 70 71 4A 2C 35 4E 79 0F FB 4C 25 7B C0 F6 64 0B E9 3E 43 A3 9B 44 B5 82 9D 4C C4 9D FC D3 C7 98 8C 28 58 50 3E 35 2B C9 69 BC 9A F8 8D 9E 90 27 09 9C 5B 62 3E BF 11 A1 99 54 94 16 96 01 E9 4D 68 5F CB 88 C2 76 C5 BE 9E BB 97 78 94 33 04 D6 57 33 B1 A7 DE 3B 20 A3 45 50 B1 D2 32 B4 3B 09 D1 83 F9 B2 02 20 21 10 16 C0 AA B5’







o Issuer Public Key Remainder: ‘8B 4E 84 02 F8 D0 21 45 60 6A 64 3F DC 52 14 76 AF 4E 50 6D’

A4c CCD application personalized with ICC Keys odd length 1000 bits:




o ICC Public Key Certificate: 31 6E E3 1D 84 51 57 B8 43 16 7C 03 32 07 46 D9 48 E6 98 F3 D1 E2 85 B1 FD 26 EA 69 F2 D1 07 F6 E3 2C 4F 88 96 F3 03 FA 08 49 FE 90 9B A6 25 3D 02 D9 AA B6 6C 2D F9 98 43 9D A7 06 37 24 7B 39 3F AF 5B F5 D9 BB 5F 08 E1 B2 C3 3A 02 0E 56 D2 16 2F C3 29 D0 5C 9E B2 E5 D8 29 58 76 B6 20 1A DD 7D D6 D8 DD 07 F6 2C 2D 3C 3B 4F 44 29 DC 44 2E DB EA 90 66 1F 2B 7E 52 35 5F 67 80 A6 98 9F 9D E5 25 FA E5 F7 64 15 19 E0 FD 2B A5 D6 B4 82


o ICC Public Key Remainder: ‘87 4F 41 7F 50 36 22 0B 07 65 E6 35 B8 B5 13 0E A2 92 08 94 C7 06 69’

o ICC Private Key: see section ‘CA Public keys and ICC Private keys values’, Key 11

When Enciphered PIN is supported (with different keys from DDA or CDA): same key value as previous one for the ICC PIN Encipherment Public key.

When DDA or CDA or Enciphered PIN are supported:

o Issuer Public Key Certificate (1152 bits): 27 3C FA 41 30 C8 23 64 4D CD E9 C1 FD 5F 4D 11 4F 9C D2 8B C8 95 96 C8 03 D3 4C 68 CF 18 5A 11 3E 38 4F 04 BD 51 ED 85 26 47 7A 5D CE F3 FB 7D 93 50 2C BE 0B 96 48 AE E6 DE 5F 46 D4 F9 28 28 B4 5D C8 A8 63 BA A6 1F 51 1B 0A F3 5E D0 34 B4 CB 8B 4D EC 46 0B 50 3E 82 FF 43 5E 6C 0A 59 B7 10 A5 17 4D B9 A3 8B 27 E7 D0 6C A2 E6 37 D2 3C EA 0F B4 28 10 84 1F F3 B7 6F 72 9E 27 A6 15 13 37 B4 2F 44 63 99 E3 6C 0B 9B 17 15 E5 CC 60 3B BC 39 F3 03 EC 6B CB 83 A3 15 07 49 E0 1B 53 EB FF A3 0A 34 0B 2B 19 2C 50 C5 9D ED FB 7B FA FB’



A5 Script commands with Mac Length = 5









A9 PSE supported: FCI of the Select PSE application personalized and with the maximum length defined in the ICS

A9a FCI of the Select CCD application personalized and with the maximum length defined in the ICS

A10 Plaintext PIN not personalized (or not activated) and CVM list does not reference the Plaintext PIN

A11.5, A11.7, A11.8, A11.11, A11.16

Image A11.5: AID length is 5, value is: A000000004





A12 N CCD applications using same partial DF name, where N is the maximum number of application declared in the ICS

A13 [LOG] not personalized (or not activated)

A14.x,… , A14.x (where x is the value of the SFI of the PSE in the range identified in the ICS )

PSE personalized with:

the SFI of the PSE in the range [1, 10] (SFI=1 in 14.1, SFI=2 in 14.2,…) N different images, each for a value (x) declared in ICS Values could be contiguous or not, e.g. 3,4,5,6 or 3, 5,7,…

Cards must be loaded with each record number declared in the ICS

A15 PSE which contains the upper limit of the number of template ‘61’ included in a single template ‘70’ in the Directory File declared in the ICS.

PSE which contains the upper limit of the record size of the Directory File declared in the ICS.

A16.1,…A16.X CDOL1/CDOL2(s) not empty, each card image according to a CDOL1 or /and CDOL2 related set defined in ICS. (each card image request a different CDOL1/CDOL2 lists)

A17.1,…A17x PDOL(s) not empty, each card image according to a PDOL list related set defined in ICS. (each card image request a different PDOL list)

A18 CDA personalized: Issuer PK certificate, ICC PK certificate, computed using the CA, Issuer, and ICC Public key length maximum declared in the ICS

DDA not personalized (if supported) - Byte ' bit 6 of AIP ('DDA supported') = '0

Enciphered PIN not personalized (if supported), and CVM list does not reference the Enciphered PIN

A18a CDA personalized: Issuer PK certificate, ICC PK certificate, computed using the CA, Issuer, and ICC Public key length






maximum declared in the ICS

DDA not personalized (if supported) - Byte ' bit 6 of AIP ('DDA supported') = '0

Enciphered PIN personalized (if supported) and CVM list reference the Enciphered PIN

A19 DDA personalized: Issuer PK certificate, ICC PK certificate, computed using the CA, Issuer, and ICC Public key length maximum declared in the ICS

CDA not personalized (if supported) - Byte ' bit 1 of AIP ('CDA supported') = '0

Enciphered PIN not personalized (if supported), and CVM list does not reference the Enciphered PIN

A19a SDA not personalized

A19b DDA personalized: Issuer PK certificate, ICC PK certificate, computed using the CA, Issuer, and ICC Public key length maximum declared in the ICS


Enciphered PIN personalized (if supported) and CVM list reference the Enciphered PIN

A19c DDA not personalized (if supported) - Byte ' bit 6 of AIP ('DDA supported') = '0


Enciphered PIN personalized (Issuer PK certificate, ICC PK certificate, computed using the CA, Issuer, and ICC Public key or PIN Encipherment key length maximum declared in the ICS ) and CVM list reference the Enciphered PIN

A20 Enciphered PIN not personalized (or not activated) and CVM list does not reference the Enciphered PIN

A21 ATC = maximum limit defined in the ICS

A22 PDOL with a set of PDOL related data which make the GPO rejected

A23 AFL including SFI in the range [11, 20]

A24 AFL including SFI in the range [21, 30]

A25 AFL with the highest record number declared in the ICS

AFL with the lower record size declared in the ICS

AFL with the upper record size declared in the ICS

A26 ATC = minimum limit defined in the ICS (or 0)

A26a ATC = maximum limit defined in the ICS - 100






A27 DDA not personalized (or not activated) - Byte ' bit 6 of AIP ('DDA supported') = '0

A27a CDA not personalized (or not activated) - Byte ' bit 1 of AIP ('CDA supported') = '0

A27b DDA and CDA not personalized (or not activated), if supported, and Enciphered PIN not personalized (or not activated) and CVM list does not reference PINs, if supported

A28 Card configuration which cumulates the transactions in a currency ‘X’ (international) in a single Transactions Counter, set the ‘Lower Offline Transaction Count Limit Exceeded’ after 3 offline transactions, set the ‘Upper Offline Transaction Count Limit exceeded’ after 5 offline transactions and does not set the bits with any other conditions specified by the Issuer.

Card configuration which cumulates the transactions in the currency ‘Y’ (domestic) in a single Cumulative Amount Counter, set the ‘Lower Cumulative Offline Amount Limit Exceeded’ when the Offline Cumulative Amount exceeds the value ‘300’, set the ‘Upper Cumulative Offline Amount Limit Exceeded’ when the Offline Cumulative Amount exceeds the value ‘500’ and does not set the bits with any other conditions specified by the Issuer

Card configuration shall not override this decline for transactions at Terminal Type ‘26’.


Card configuration which cumulates the transactions in the currency ‘Y’ (domestic) in a single Cumulative Amount Counter, set the ‘Lower Cumulative Offline Amount Limit Exceeded’ when the Offline Cumulative Amount exceeds the value ‘300’, set the ‘Upper Cumulative Offline Amount Limit Exceeded’ when the Offline Cumulative Amount exceeds the value ‘500’ and does not set the bits with any other conditions specified by the Issuer.

Card configuration shall override this decline for transactions at Terminal Type ‘26’.

The Card configuration does not require an Issuer Authentication to pass for resetting the velocity-checking offline transaction count(s) and cumulative offline amount(s).

The CCD application shall use the ‘Update Counters’ option ‘No Update of Offline Counters’ to update the velocity-checking count(s) and cumulative amount(s), if the ‘CSU Created by Proxy for the Issuer’ bit in the CSU is set to 1.

Card with the Issuer option set: when ‘Issuer Authentication Not Performed' bit is set in CVR, the Card configuration shall not force transactions at online-capable terminals to go online.








The CCD application shall use the ‘Update Counters’ option ‘Set the Offline Counters to zero’ to update the velocity-checking count(s) and cumulative amount(s), if the ‘CSU Created by Proxy for the Issuer’ bit in the CSU is set to 1.



The CCD application shall use the ‘Update Counters’ option ‘Set the Offline Counters to upper limits’ to update the velocity-checking count(s) and cumulative amount(s), if the ‘CSU Created by Proxy for the Issuer’ bit in the CSU is set to 1.



The CCD application shall use the ‘Update Counters’ option ‘Add






current transaction to Offline Counters’ to update the velocity-checking count(s) and cumulative amount(s), if the ‘CSU Created by Proxy for the Issuer’ bit in the CSU is set to 1.

A34 Card with the Issuer option set: when ‘PIN Try Limit Exceeded' bit is set in CVR, the Card configuration shall decline the transaction offline.

A35 PTC = 0

A36.x,… A36.y PIN length in the range [5, 12] (36.1 for a PIN length equal 5 (value ‘12345’), 36.2 for a PIN length equal to 6 (value ‘123456’,…, 36.7 for a PIN length equal 11 (value ‘12345678901’),…)

A37.3, A37.8 and A37.N

Image A37.3 with PTL value = 3 (identical to Image A1)

Image A37.8 with PTL value = 8

Image A37.N with PTL value = N but limited to ‘F’

A38.1, A38.2 Up to 2 card images (if supported), each according to a supported Log Entry, with different SFI and different maximum number of records, declared in ICS (SFI and Maximum number of records shall be different than Card image A1)

A39.1 to A39.4 Up to 4 card images (if supported), each according to supported Log Format declared in ICS and recommended by the Card vendor (SFI and Maximum number of records shall be different than Card image A1).

A41 PTC = 0

Issuer option decline offline when PTC = 0

A42 Card with the Issuer option set: when ‘Issuer Authentication Not Performed' bit is set in CVR, the Card configuration shall force transactions at online-capable terminals to go online and shall decline if unable to go online or offline only terminal.

Card with the Issuer option set: when ‘Issuer Authentication Failed' bit is set in CVR, the Card configuration shall force transactions at online-capable terminals to go online and shall decline if unable to go online or offline only terminal.

Card with the Issuer option set: when ‘PIN Try Limit Exceeded' bit is set in CVR, the Card configuration shall force transactions at online-capable terminals to go online and shall decline if unable to go online or offline only terminal.

Card with the Issuer option set: when ‘Last Online Not Completed' bit is set in CVR, the Card configuration shall decline at online-capable terminal when unable to go online or at offline only terminal.

Card with the Issuer option set: when ‘Go Online on Next Transaction Was Set' bit is set in CVR, the Card configuration shall decline at online-capable terminals when unable to go online or at offline only terminal.

A42a ATC = 0 (or the minimum declared in ICS






New card which set the ‘Go Online on Next Transaction Was Set’ bit.

A42b ATC = 0 (or the minimum declared in ICS

New card which does not set the ‘Go Online on Next Transaction Was Set’ bit.

A43 Card with the Issuer option set: no action when ‘Issuer Authentication Not Performed' bit is set in CVR.

Card with the Issuer option set: no action when ‘Issuer Authentication Failed' bit is set in CVR.

Data: Card with the Issuer option set: no action when ‘PIN Try Limit Exceeded' bit is set in CVR.

Data: Card with the Issuer option set: when ‘Issuer Script Processing Failed' bit is set in CVR, the Card configuration shall not force transactions at online-capable terminals to go online.

A44 The Card configuration does not require issuer authentication to pass for resetting of non-velocity-checking indicators and counts.

A44a The Card configuration does not require issuer authentication to pass for resetting of non-velocity-checking indicators and counts.

Indicators set in previous transaction (Issuer Authentication Failed, Last online Transaction Not Completed, Offline Data Authentication Failed on Previous Transaction, and Go Online on Next Transaction Was Set)

A45 The Card configuration requires issuer authentication to be performed for the application to approve (TC) an online transaction.

The Card configuration does not require issuer authentication to pass for resetting of non-velocity-checking indicators and counts.

Card configuration which cumulates the transactions in a currency ‘X’ (international) in a single Transactions Counter, set the ‘Lower Offline Transaction Count Limit Exceeded’ after 3 offline transactions, set the ‘Upper Offline Transaction Count Limit exceeded’ after 5 offline transactions and does not set the bits with any other conditions specified by the Issuer.


A47 The Card configuration requires issuer authentication to pass when performed for the application to approve (TC) an online transaction’successful.

The Card configuration does not require issuer authentication to






pass for resetting of non-velocity-checking indicators and counts

A49.1,…A49.N All configurations of IAD values when PDOL related is supported and data for the Terminal Type and the first two bytes of the Additional Terminal Capabilities are '34’ and '0000' respectively”

A50 CCD application personalized with same keys for PIN encipherment and DDA and/or CDA:

ICC Public Key Certificate: same as Card Image A1

ICC Public Key Exponent: same as Card Image A1

ICC Public Key Remainder: same as Card Image A1

ICC Private Key: same as Card Image A1

A51.1,… A51.N All configurations of expected length and associated value of the Proprietary Authentication Data, according to ICS declaration

A52 Card personalized in such as way that:

PDOL not present in FCI of AID

PDOL not expected by the CCD application in the GET PROCESSING OPTIONS Command data






5 Level 2 Options of a CCD Application

5.1 Cards Images requested for all CCD Applications

ICS Question CCD Configuration Card Images

None

None

A1 A1a A1b A1c

A9a A10 A11 A12

A16 A21 A25 A26

A28 A29 A30 A31

A32 A34 A35

A36.x to

A36.y

A37 A42 A42a A42b

A43 A44 A44a A45

A47 A26a

5.2 Cards Images requested by CCD options

In addition to the Card Images requested above for all CCD applications (regardless of which options are supported), the table below lists additional Card Images requested depending on the CCD application options supported:

ICS Question CCD Configuration Image

L2.2 - PSE supported

PSE

A1 A2 A14A to

A14B

A15 A9

L2.2 - PSE not supported NO PSE A1

L2.3.1 - More than one CCD applications AIDs are supported

Multi app A1

L2.4 - PDOL supported PDOL A3 A17 A22 A52

L2.4 - PDOL not supported NO PDOL A1

L2.5.1 - [SFI 11 to 20] range supported SFI 11-20 A23

L2.5.2 - [SFI 21 to 30] range supported SFI 21-30 A24

L2.7 - SDA supported SDA A1 A4 A19a






L2.8 - DDA supported

DDA

A1 A4 A4a A4b

A10 A27 A28

L2.8 - DDA not supported NO DDA A1

L2.9 - CDA supported

CDA

A1 A4 A4a A4b

A10 A16 A26 A27a

A28 A41 A47

L2.9 - CDA not supported NO CDA A1

L2.11 - ENCIPHERED PIN supported

ENC PIN

A20 A1 A4

A36.x to

A36.y

A4a A4b A37

A35 A44a A28 A34

A42 A43

L2.11 - ENCIPHERED PIN not supported NO ENC PIN A10 A1

L2.13.1 - The CCD application is able to detect that the Terminal is Offline Only

OFFLINE ONLY DETECT A28 A29

L2.13.1 - The CCD application is not able to detect that the Terminal is Offline Only

NO OFFLINE ONLY DETECT A28 A29

L2.13.3 - Can the CCD application be configured as an Online Only application?

ONLINE ONLY CRM A1

L2.14.1 - APPLICATION BLOCK before 2nd GENERATE AC supported

APPLICATION BLOCK BEFORE A1

L2.14.2 - APPLICATION BLOCK after 2nd GENERATE AC supported

APPLICATION BLOCK AFTER A1

L2.16.1 - CARD BLOCK before 2nd GENERATE AC supported

CARD BLOCK BEFORE A1

L2.16.2 - CARD BLOCK after 2nd GENERATE AC supported

CARD BLOCK AFTER A1

L2.17.1 - PIN CHANGE UNBLOCK before 2nd GENERATE AC supported

PIN UNBLOCK BEFORE A1

L2.17.2 - PIN CHANGE UNBLOCK after 2nd GENERATE AC supported

PIN UNBLOCK AFTER A1

L2.19.1 - Additional SCRIPT Command with SMC before 2nd GENERATE AC supported

ADD SCRIPT WITH SMC BEFORE A1

L2.19.2 - Additional SCRIPT Command with SMC after 2nd GENERATE AC supported

ADD SCRIPT WITH SMC AFTER A1






L2.22 - LOG file supported

LOG

A1 A13 A10 A39.3

A38.1 A38.2 A39.1 A39.2

A39.4

L2.22 - LOG file not supported NO LOG A1

L2.24.2 - included in the ARPC calculation (CSU Byte 1 bit 8 supported) supported

Prop Aut Data in ARPC A51

L2.32 - Issuer Application Data different from CCD

IAD A49

(L2.1.1 - MAC with length equal to 5) AND (L2.11 - ENCIPHERED PIN) AND (L2.17.1 - PIN CHANGE UNBLOCK before 2nd GENERATE AC) supported

MAC5 & ENC PIN & PIN UNBLOCK BEFORE

A5

(L2.1.1 - MAC with length equal to 5) AND (L2.11 - ENCIPHERED PIN) AND (L2.17.2 - PIN CHANGE UNBLOCK after 2nd GENERATE AC) supported

MAC5 & ENC PIN & PIN UNBLOCK AFTER

A5

(L2.1.1 - MAC with length equal to 5) AND (L2.14.1 - APPLICATION BLOCK before 2nd GENERATE AC) supported

MAC5 & APPLICATION BLOCK BEFORE

A5

(L2.1.1 - MAC with length equal to 5) AND (L2.14.2 - APPLICATION BLOCK after 2nd GENERATE AC) supported

MAC5 & APPLICATION BLOCK AFTER

A5

(L2.1.1 - MAC with length equal to 5) AND (L2.16.1 - CARD BLOCK before 2nd GENERATE AC) supported

MAC5 & CARD BLOCK BEFORE A5

(L2.1.1 - MAC with length equal to 5) AND (L2.16.2 - CARD BLOCK after 2nd GENERATE AC) supported

MAC5 & CARD BLOCK AFTER A5

(L2.1.1 - MAC with length equal to 5) AND (L2.17.1 - PIN CHANGE UNBLOCK before 2nd GENERATE AC) supported

MAC5 & PIN UNBLOCK BEFORE A5

(L2.1.1 - MAC with length equal to 5) AND (L2.17.2 - PIN CHANGE UNBLOCK after 2nd GENERATE AC) supported

MAC5 & PIN UNBLOCK AFTER A5

(L2.1.1 - MAC with length equal to 5) AND (L2.18.1 - Additional Script command without SMC before 2nd GENERATE AC) supported

MAC5 & ADD SCRIPT WITHOUT SMC BEFORE

A5

(L2.1.1 - MAC with length equal to 5) AND (L2.18.2 - Additional Script command without SMC after 2nd GENERATE AC) supported

MAC5 & ADD SCRIPT WITHOUT SMC AFTER

A5






(L2.1.1 - MAC with length equal to 5) AND (L2.19.1 - Additional Script command with SMC before 2nd GENERATE AC) supported

MAC5 & ADD SCRIPT WITH SMC BEFORE

A5

(L2.1.1 - MAC with length equal to 5) AND (L2.19.2 - Additional Script command with SMC after 2nd GENERATE AC) supported

MAC5 & ADD SCRIPT WITH SMC AFTER

A5



A6



A6



A6



A6











A6



A6



A6



A6








A7



A7



A7



A7











A7



A7



A7



A7



A8



A8








A8



A8











A8



A8



A8



A8

(L2.2 - PSE) AND (L2.22 - LOG file) supported PSE & LOG A1 A38.1 A38.2

(L2.7 - SDA) AND ((L2.8 - DDA) OR (L2.9 - CDA) OR ((L2.11 - ENCIPHERED PIN) AND (L2.11.2 - Enciphered PIN and DDA/CDA use the same ICC Public key))) supported

SDA & (DDA or CDA or (ENC PIN & same key))

A19a

(L2.7 - SDA) AND ((L2.8 - DDA) OR (L2.9 - CDA) OR (L2.11 - ENCIPHERED PIN)) supported

SDA & (DDA or CDA or ENC PIN) A27b

(L2.7 - SDA) OR (L2.8 - DDA) OR (L2.9 - CDA) supported

SDA or DDA or CDA A1

(L2.8 - DDA) AND ((L2.9 - CDA) OR (L2.11 - ENCIPHERED PIN)) supported

DDA & (CDA or ENC PIN) A19






(L2.8 - DDA) AND (L2.11 - ENCIPHERED PIN) AND (L2.22 - LOG file) supported

DDA & ENC PIN & LOG A13

(L2.8 - DDA) AND (L2.11 - ENCIPHERED PIN) supported

DDA & ENC PIN A20 A1 A10

(L2.8 - DDA) AND (L2.14.1 – Issuer Script before 2nd GENERATE AC) supported

DDA & SCRIPT BEFORE A27

(L2.8 - DDA) AND (L2.14.2 – Issuer Script after 2nd GENERATE AC) supported

DDA & SCRIPT AFTER A27

(L2.8 - DDA) AND (L2.22 - LOG file) supported DDA & LOG A13 A27

(L2.8 - DDA) AND (L2.8.3 - Odd Key Length) supported

DDA & odd key A4c

(L2.8 - DDA) AND (L2.9 - CDA) AND (L2.11 - ENCIPHERED PIN) supported

DDA & CDA & ENC PIN A27a A19b A18a

(L2.8 - DDA) AND (L2.9 - CDA) AND (L2.14.1 – Issuer Script before 2nd GENERATE AC) supported

DDA & CDA & SCRIPT BEFORE A18

(L2.8 - DDA) AND (L2.9 - CDA) AND (L2.14.2 – Issuer Script after 2nd GENERATE AC) supported

DDA & CDA & SCRIPT AFTER A18

(L2.8 - DDA) AND (L2.9 - CDA) AND (L2.22 - LOG file) supported

DDA & CDA & LOG A27

(L2.8 - DDA) AND (L2.9 - CDA) supported DDA & CDA A27a A27

(L2.8 - DDA) OR (L2.9 - CDA) OR ((L2.11 - ENCIPHERED PIN) AND (L2.11.2 - Enciphered PIN and DDA/CDA use the same ICC Public key)) supported

DDA or CDA or (ENC PIN & same key)

A1 A4

((L2.8 - DDA) OR (L2.11 - ENCIPHERED PIN)) AND (L2.9 - CDA) supported

(DDA or ENC PIN) & CDA A18

((L2.8 - DDA) OR (L2.9 - CDA)) AND ((L2.11 - ENCIPHERED PIN) AND (L2.11.1 - Enciphered PIN and DDA/CDA can have different ICC Public key) supported

(DDA or CDA) & ENC PIN & different key

A1

((L2.8 - DDA) OR (L2.9 - CDA)) AND ((L2.11 - ENCIPHERED PIN) AND (L2.11.2 - Enciphered PIN and DDA/CDA can have same ICC Public key) supported

(DDA or CDA) & ENC PIN & same key A50

((L2.8 - DDA) OR (L2.9 - CDA)) AND (L2.11 - ENCIPHERED PIN) supported

(DDA or CDA) & ENC PIN A19c






(L2.9 - CDA) AND (L2.11 - ENCIPHERED PIN) AND (L2.14.1 OR L2.15.1 OR L2.16.1 OR L2.17.1 OR L2.18.1 OR L2.19.1 – Issuer Script before 2nd GENERATE AC) supported

CDA & ENC PIN & SCRIPT BEFORE A20

(L2.9 - CDA) AND (L2.11 - ENCIPHERED PIN) AND (L2.14.2 OR L2.15.2 OR L2.16.2 OR L2.17.2 OR L2.18.2 OR L2.19.2 – Issuer Script after 2nd GENERATE AC) supported

CDA & ENC PIN & SCRIPT AFTER A20

(L2.9 - CDA) AND (L2.11 - ENCIPHERED PIN) AND (L2.22 - LOG file) supported

CDA & ENC PIN & LOG A20

(L2.9 - CDA) AND (L2.11 - ENCIPHERED PIN) supported

CDA & ENC PIN A20 A1

(L2.9 - CDA) AND (L2.14.1 OR L2.15.1 OR L2.16.1 OR L2.17.1 OR L2.18.1 OR L2.19.1 – Issuer Script before 2nd GENERATE AC) AND (L2.22 - LOG file) supported

CDA & SCRIPT BEFORE & LOG A13

(L2.9 - CDA) AND (L2.14.1 OR L2.15.1 OR L2.16.1 OR L2.17.1 OR L2.18.1 OR L2.19.1 – Issuer Script before 2nd GENERATE AC) supported

CDA & SCRIPT BEFORE A27a A1

(L2.9 - CDA) AND (L2.14.1 OR L2.15.1 OR L2.16.1 OR L2.17.1) AND (L2.18.1 OR L2.19.1) – Issuer Script after 2nd GENERATE AC supported

CDA & (EMV SCRIPT BEFORE & ADD SCRIPT BEFORE)

A1

(L2.9 - CDA) AND (L2.14.2 OR L2.15.2 OR L2.16.2 OR L2.17.2 OR L2.18.2 OR L2.19.2 – Issuer Script after 2nd GENERATE AC) AND (L2.22 - LOG file) supported

CDA & SCRIPT AFTER & LOG A13

(L2.9 - CDA) AND (L2.14.2 OR L2.15.2 OR L2.16.2 OR L2.17.2 OR L2.18.2 OR L2.19.2 – Issuer Script after 2nd GENERATE AC) supported

CDA & SCRIPT AFTER A27a A1


CDA & (EMV SCRIPT AFTER & ADD SCRIPT AFTER)

A1

(L2.9 - CDA) AND (L2.17.1 - PIN CHANGE UNBLOCK) AND (L2.18.1 OR L2.19.1) – Issuer Script after 2nd GENERATE AC supported

CDA & (PIN UNBLOCK BEFORE & ADD SCRIPT BEFORE)

A1


CDA & (PIN UNBLOCK AFTER & ADD SCRIPT AFTER)

A1

(L2.9 - CDA) AND (L2.22 - LOG file) supported CDA & LOG A13 A27a A1 A10

(L2.9 - CDA) AND (L2.4 - PDOL) supported CDA & PDOL A17

(L2.9 - CDA) AND (L2.9.3 - Odd Key Length) CDA & odd key A4c






supported

(L2.11 - ENCIPHERED PIN) AND ((L2.13.1 - The CCD application is able to detect that the Terminal is Offline Only) OR (L2.13.2 - The CCD application is able to detect that the Terminal is Online Capable)) supported

ENC PIN & (ONLINE CAPABLE DETECT OR OFFLINE ONLY DETECT)

A1 A42

(L2.11 - ENCIPHERED PIN) AND ((L2.13.1 - The CCD application is not able to detect that the Terminal is Offline Only) AND (L2.13.2 - The CCD application is not able to detect that the Terminal is Online Capable)) supported

ENC PIN & (NO ONLINE CAPABLE DETECT & NO OFFLINE ONLY DETECT)

A1 A42

(L2.11 - ENCIPHERED PIN) AND (L2.11.5 - Odd Key Length) supported

ENC PIN & odd key A4c

(L2.11 - ENCIPHERED PIN) AND (L2.14.1 OR L2.15.1 OR L2.16.1 OR L2.17.1 OR L2.18.1 OR L2.19.1) – Issuer Script before 2nd GENERATE AC supported

ENC PIN & SCRIPT BEFORE A20

(L2.11 - ENCIPHERED PIN) AND (L2.14.2 OR L2.15.2 OR L2.16.2 OR L2.17.2 OR L2.18.2 OR L2.19.2) – Issuer Script after 2nd GENERATE AC supported

ENC PIN & SCRIPT AFTER A20

(L2.11 - ENCIPHERED PIN) AND (L2.17.1 - PIN CHANGE UNBLOCK before 2nd GENERATE AC) supported

ENC PIN & PIN UNBLOCK BEFORE A1

(L2.11 - ENCIPHERED PIN) AND (L2.17.2 - PIN CHANGE UNBLOCK after 2nd GENERATE AC) supported

ENC PIN & PIN UNBLOCK AFTER A1

(L2.11 - ENCIPHERED PIN) AND (L2.22 - LOG file) supported

ENC PIN & LOG A20

(L2.11 - ENCIPHERED PIN) AND (L2.24.2 - included in the ARPC calculation (CSU Byte 1 bit 8 supported)) supported

ENC PIN & Prop Aut Data in ARPC A51

(L2.13.1 - The CCD application is able to detect that the Terminal is Offline Only) OR (L2.13.2 - Is the CCD application is able to detect that the Terminal is Online Capable)

OFFLINE ONLY DETECT or ONLINE CAPABLE DETECT

A1 A42

(L2.13.1 - The CCD application is not able to detect that the Terminal is Offline Only) AND (L2.13.2 - Is the CCD application is not able to detect that the Terminal is Online Capable) supported

NO OFFLINE ONLY DETECT & NO ONLINE CAPABLE DETECT

A1 A42

(L2.14.1 OR L2.15.1 OR L2.16.1 OR L2.17.1 OR L2.18.1 OR L2.19.1) – Issuer Script before 2nd GENERATE AC AND (L2.20 - CVR bits ‘Number of Issuer Script commands reset after successful Authentication) supported

SCRIPT BEFORE & RESET SCRIPT A1 A29






(L2.14.1 OR L2.15.1 OR L2.16.1 OR L2.17.1 OR L2.18.1 OR L2.19.1) – Issuer Script before 2nd GENERATE AC AND (L2.22 - LOG file) supported

SCRIPT BEFORE & LOG A13

(L2.14.1 OR L2.15.1 OR L2.16.1 OR L2.17.1 OR L2.18.1 OR L2.19.1) – Issuer Script before 2nd GENERATE AC supported

SCRIPT BEFORE

A1 A44 A45 A47

A43

(L2.14.1 OR L2.15.1 OR L2.16.1 OR L2.17.1 OR L2.18.1 OR L2.19.1) – Issuer Script before 2nd GENERATE AC supported AND (L2.20 - CVR bits ‘Number of Issuer Script commands reset after successful Authentication) not supported

SCRIPT BEFORE & NO RESET SCRIPT

A1

(L2.14.1 OR L2.15.1 OR L2.16.1 OR L2.17.1) AND (L2.18.1 OR L2.19.1) – Issuer Script before 2nd GENERATE AC supported

EMV SCRIPT BEFORE & ADD SCRIPT BEFORE

A1

(L2.14.2 OR L2.15.2 OR L2.16.2 OR L2.17.2 OR L2.18.2 OR L2.19.2) – Issuer Script after 2nd GENERATE AC AND (L2.20 - CVR bits ‘Number of Issuer Script commands reset after successful Authentication) supported

SCRIPT AFTER & RESET SCRIPT A1 A29

(L2.14.2 OR L2.15.2 OR L2.16.2 OR L2.17.2 OR L2.18.2 OR L2.19.2) – Issuer Script after 2nd GENERATE AC supported

SCRIPT AFTER

A1 A44 A45 A47

A43

(L2.14.2 OR L2.15.2 OR L2.16.2 OR L2.17.2 OR L2.18.2 OR L2.19.2) – Issuer Script after 2nd GENERATE AC supported AND (L2.20 - CVR bits ‘Number of Issuer Script commands reset after successful Authentication) not supported

SCRIPT AFTER & NO RESET SCRIPT

A1

(L2.14.2 OR L2.15.2 OR L2.16.2 OR L2.17.2) AND (L2.18.2 OR L2.19.2) – Issuer Script after 2nd GENERATE AC supported

EMV SCRIPT AFTER & ADD SCRIPT AFTER

A1

(L2.14.2 OR L2.15.2 OR L2.16.2 OR L2.17.2 OR L2.18.2 OR L2.19.2) – Issuer Script after 2nd GENERATE AC AND (L2.22 - LOG file) supported

SCRIPT AFTER & LOG A13

((L2.14.2 – APPLICATION BLOCK after 2nd GENERATE AC) OR (L2.14.1 – APPLICATION BLOCK before 2nd GENERATE AC) supported

APPLICATION BLOCK AFTER OR APPLICATION BLOCK BEFORE

A1

((L2.14.2 - APPLICATION BLOCK after 2nd GENERATE AC) OR (L2.14.1 - APPLICATION BLOCK before 2nd GENERATE AC)) AND (L2.22 - LOG file) supported

(APPLICATION BLOCK BEFORE OR APPLICATION BLOCK AFTER) & LOG

A1

((L2.14.2 – APPLICATION BLOCK after 2nd GENERATE AC) OR (L2.14.1 – APPLICATION BLOCK before 2nd GENERATE AC)) AND (L2.3.1 - More than one CCD applications AIDs) supported

(APPLICATION BLOCK AFTER OR APPLICATION BLOCK BEFORE) & multiapp

A1






((L2.16.2 – CARD BLOCK after 2nd GENERATE AC) OR (L2.16.1 – CARD BLOCK before 2nd GENERATE AC)) AND (L2.3.1 - More than one CCD applications AIDs) supported

(CARD BLOCK AFTER OR CARD BLOCK BEFORE) & multiapp

A1

((L2.16.2 – CARD BLOCK after 2nd GENERATE AC) OR (L2.16.1 – CARD BLOCK before 2nd GENERATE AC)) supported

CARD BLOCK AFTER OR CARD BLOCK BEFORE

A1

(L2.17.1 - PIN CHANGE UNBLOCK) AND (L2.18.1 OR L2.19.1 - Additional script) before 2nd GENERATE AC supported

PIN UNBLOCK BEFORE & ADD SCRIPT BEFORE

A1

(L2.17.2 - PIN CHANGE UNBLOCK) AND (L2.18.2 OR L2.19.2) – Issuer Script after 2nd GENERATE AC supported

(PIN UNBLOCK AFTER & ADD SCRIPT AFTER)

A1

(L2.18.1 - Additional SCRIPT Command without SMC before 2nd GENERATE AC supported

ADD SCRIPT WITHOUT SMC BEFORE

A1

(L2.18.1 AND L2.18.4) - Additional SCRIPT Command with tag '81' (SMI) before 2nd GENERATE AC supported

ADD SCRIPT WITH SMI BEFORE A1

(L2.18.2 - Additional SCRIPT Command without SMC after 2nd GENERATE AC supported

ADD SCRIPT WITHOUT SMC AFTER A1

(L2.18.2 AND L2.18.4) - Additional SCRIPT Command with tag '81' (SMI) after 2nd GENERATE AC supported

ADD SCRIPT WITH SMI AFTER A1






6 Level 2 Test Cases applicable depending

on the CCD Application options

This section lists the test Cases applicable to perform the CCD Type Approval Level 2, in accordance with the Level 2 section of the EMVCo Common Core Definitions Level 1 & Level 2 Implementation Conformance Statement – September 2006. The tests are sorted by configurable options according to the ICS template, and next to each test case is also listed the card image(s) to be used.

6.1 Tests to run for all CCD application

ICS Questions CCD

Configuration

Test

Case

Image Test

Case

Image

None

None

2CA.001.00 A1 2CH.113.00 A44

2CA.001.00 A10 2CH.114.00 A1

2CA.002.00 A1 2CH.114.01 A45

2CA.011.00 A1 2CH.115.00 A1

2CA.012.00 A1 2CH.115.01 A47

2CA.019.00 A1 2CH.116.00 A1

2CA.023.00 A1 2CH.117.00 A28

2CA.027.00 A1 2CH.119.00 A28

2CB.001.00 A1 2CH.120.00 A28

2CB.001.01 A9a 2CH.121.00 A28

2CB.002.00 A1 2CH.122.00 A28

2CB.002.01 A1 2CH.126.00 A28

2CB.003.00 A11.x 2CH.159.00 A1

2CB.003.01 A1 2CH.160.00 A1

2CB.004.00 A11.7, A11,8,

A11.11, A11.16

2CH.161.00 A1

2CB.005.00 A11.7, A11,8,

A11.11, A11.16

2CH.162.00 A1

2CB.006.00 A12 2CH.163.00 A1

2CB.007.00 A12 2CH.164.00 A44

2CB.008.00 A1 2CH.165.00 A44

2CB.010.00 A1 2CH.166.00 A1

2CC.001.00 A1 2CH.167.00 A45

2CC.003.00 A1 2CH.168.00 A1

2CC.004.00 A1 2CH.169.00 A47

2CC.008.00 A1 2CH.170.00 A1

2CC.009.00 A21 2CH.171.00 A1

2CD.001.00 A1 2CH.172.00 A1






2CD.001.01 A1 2CH.173.00 A1

2CD.002.00 A1 2CH.174.00 A1

2CD.002.03 A25 2CH.175.00 A44a

2CD.002.04 A25 2CH.176.00 A28

2CD.002.05 A25 2CI.001.00 A1

2CD.002.06 A1 2CI.002.00 A42

2CD.003.00 A1 2CI.003.00 A43

2CF.001.00 A1 2CI.008.00 A1

2CF.001.01 A1 2CI.009.00 A42

2CF.001.02 A1 2CI.010.00 A43

2CF.002.00 A1 2CI.015.00 A34

2CF.002.01 A1 2CI.016.00 A34

2CF.005.00 A1 2CI.019.00 A1

2CF.005.02 A1 2CI.020.00 A1

2CF.006.00 A1,

A36.x

to

A36.y

2CI.021.00 A42

2CF.007.00 A1 2CI.022.00 A42

2CF.008.00 A1 2CI.023.00 A43

2CF.008.01 A1 2CI.024.00 A43

2CF.009.00 A37 2CI.047.00 A1

2CF.010.00 A36.(y-1),

A36.y

2CI.049.00 A1

2CF.011.00 A37 2CI.050.00 A42

2CG.001.00 A1 2CI.062.00 A1

2CG.001.01 A1 2CI.063.00 A42

2CI.068.00 A34 2CI.069.00 A34

2CG.001.02 A1 2CJ.001.00 A42a

2CG.001.03 A1 2CJ.002.00 A42a

2CG.001.05 A1 2CJ.003.00 A42b

2CG.004.00 A26 2CJ.004.00 A42b

2CG.009.00 A16 2CJ.005.00 A45

2CG.010.00 A16 2CJ.006.00 A1

2CH.001.00 A1 2CJ.008.00 A1

2CH.002.00 A1 2CJ.009.00 A28

2CH.003.00 A1 2CJ.010.00 A28

2CG.004.01 A26a 2CJ.011.00 A28

2CH.005.00 A1 2CJ.012.00 A28

2CH.006.00 A1 2CJ.013.00 A29

2CH.007.00 A1 2CJ.014.00 A29

2CH.008.00 A1 2CJ.015.00 A29

2CH.012.00 A1 2CJ.016.00 A29

2CH.013.00 A1 2CJ.017.00 A28

2CH.016.00 A1 2CJ.018.00 A28

2CH.017.00 A1 2CJ.019.00 A28

2CH.018.00 A1 2CJ.020.00 A28

2CH.019.00 A1 2CJ.021.00 A28






2CH.020.00 A1 2CJ.022.00 A28

2CH.021.00 A1 2CJ.023.00 A28

2CH.022.00 A1 2CJ.024.00 A28

2CH.023.00 A1 2CJ.025.00 A29

2CH.024.00 A1 2CJ.026.00 A30

2CH.025.00 A1 2CJ.027.00 A31

2CH.026.00 A1 2CJ.028.00 A32

2CH.027.00 A1 2CJ.029.00 A29

2CH.028.00 A1 2CJ.030.00 A30

2CH.029.00 A1 2CJ.031.00 A31

2CH.030.00 A1 2CJ.032.00 A32

2CH.031.00 A1 2CL.001.00 A1

2CH.032.00 A1 2CL.002.00 A1

2CH.033.00 A1 2CL.003.00 A1

2CH.034.00 A1 2CL.004.00 A1

2CH.035.00 A44 2CL.005.00 A1

2CH.036.00 A44 2CL.006.00 A1

2CH.037.00 A44 2CL.007.00 A37.N

2CH.038.00 A1 2CL.008.00 A37.N

2CH.039.00 A45 2CL.009.00 A1

2CH.040.00 A37 2CL.010.00 A1

2CH.041.00 A37 2CL.013.00 A1

2CH.042.00 A37 2CL.014.00 A1

2CH.043.00 A37 2CL.015.00 A1

2CH.044.00 A37 2CL.016.00 A1

2CH.045.00 A37 2CL.017.00 A1

2CH.046.00 A37 2CL.018.00 A1

2CH.047.00 A37 2CL.019.00 A1

2CH.048.00 A37 2CL.020.00 A44

2CH.049.00 A37 2CL.021.00 A44

2CH.050.00 A37 2CL.022.00 A1

2CH.050.01 A37 2CL.023.00 A45

2CH.050.02 A37 2CL.024.00 A1

2CH.051.00 A37 2CL.025.00 A47

2CH.052.00 A37 2CL.026.00 A28

2CH.052.01 A37 2CL.027.00 A28

2CH.053.00 A1 2CL.028.00 A28

2CH.055.00 A1 2CL.029.00 A28

2CH.055.01 A1 2CL.030.00 A28

2CH.056.00 A1 2CL.031.00 A28

2CH.058.00 A1 2CL.032.00 A28

2CH.058.01 A1 2CL.033.00 A28

2CH.059.00 A1 2CL.034.00 A29

2CH.060.00 A35 2CL.034.01 A29

2CH.061.00 A1 2CL.035.00 A29

2CH.084.00 A1 2CL.035.01 A29

2CH.085.00 A1 2CL.036.00 A29

2CH.086.00 A1 2CL.036.01 A29

2CH.087.00 A1 2CL.037.00 A29






2CH.087.01 A35 2CL.037.01 A29

2CH.087.02 A35 2CL.038.00 A45

2CH.088.00 A1 2CL.039.00 A28

2CH.089.00 A1 2CL.040.00 A45

2CH.094.00 A1 2CL.041.00 A28

2CH.095.00 A1 2CL.042.00 A45

2CH.096.00 A1 2CL.043.00 A28

2CH.097.00 A1 2CL.044.00 A45

2CH.098.00 A35 2CL.045.00 A28

2CH.099.00 A35 2CL.046.00 A1

2CH.100.00 A1 2CL.047.00 A1

2CH.101.00 A1 2CL.048.00 A45

2CH.108.00 A1 2CL.049.00 A47

2CH.109.00 A1 2CL.050.00 A47

2CH.111.00 A1 2CL.050.01 A47

2CH.112.00 A44 2CL.050.02 A47

2CL.003.03 A1 2CB.003.03 A1a

2CB.003.03 A1b 2CB.003.03 A1c






6.2 Tests to run depending on the CCD options supported

ICS Questions CCD

Configuration

Test

Case

Image Test

Case

Image

L2.2 - PSE supported

PSE

2CA.021.00 A1 2CB.102.00 A15

2CB.100.00 A14.x 2CB.103.00 A15

2CB.101.00 A1 2CB.104.00 A9

2CB.101.01 A1

L2.2 - PSE not supported NO PSE 2CA.022.00 A1 2CB.012.00 A1

L2.3.1 - More than one CCD applications AIDs are supported

Multi app

2CB.003.02 A1 2CB.010.01 A1

2CB.008.01 A1

L2.4 - PDOL supported

PDOL

2CA.026.00 A3 2CC.010.00 A22

2CC.003.01 A17.x 2CG.008.00 A17

2CC.003.02 A17.x

L2.4 - PDOL not supported NO PDOL 2CC.002.00 A1

L2.5.1 - [SFI 11 to 20] range supported SFI 11-20 2CD.002.01 A23

L2.5.2 - [SFI 21 to 30] range supported SFI 21-30 2CD.002.02 A24

L2.7 - SDA supported

SDA

2CC.005.00 A1 2CH.143.00 A1

2CD.004.00 A1, A4 2CH.150.00 A1

2CH.141.00 A1 2CH.151.00 A1

2CH.142.00 A1 2CH.152.00 A1

L2.8 - DDA supported

DDA

2CA.003.00 A1 2CH.014.00 A1

2CA.004.00 A1 2CH.015.00 A1

2CA.005.00 A1 2CH.144.00 A1

2CA.014.00 A1 2CH.145.00 A1

2CC.006.00 A1 2CH.146.00 A1

2CE.001.00 A1 2CH.153.00 A1

2CE.001.01 A1 2CH.154.00 A1

2CE.002.00 A1, A4, A4a, A4b

2CH.155.00 A1

2CE.003.00 A1 2CH.181.00 A28

L2.8 - DDA not supported NO DDA 2CC.006.02 A1







CDA

2CA.008.00 A1 2CG.013.00 A16

2CA.009.00 A1 2CH.009.00 A41

2CA.015.00 A1 2CH.009.01 A47

2CA.019.01 A1 2CH.010.00 A1

2CC.007.00 A1 2CH.011.00 A1

2CG.001.04 A1 2CH.147.00 A1

2CG.003.00 A1,

A4,

A4a,

A4b

2CH.148.00 A1

2CG.005.00 A26 2CH.149.00 A1

2CG.006.00 A1 2CH.156.00 A1

2CG.006.01 A1 2CH.157.00 A1

2CG.012.00 A1 2CH.158.00 A1

2CG.005.01 A26a 2CH.182.00 A28

L2.9 - CDA not supported

NO CDA

2CC.007.02 A1 2CG.002.00 A1

L2.11 - ENCIPHERED PIN supported

ENC PIN

2CA.013.00 A1 2CH.077.00 A1

2CA.024.00 A1 2CH.077.01 A1

2CC.004.01 A1 2CH.078.00 A1

2CH.080.00 A1

2CD.006.00 A1, A4 2CH.080.01 A1

2CF.003.00 A1 2CH.081.00 A1

2CF.003.01 A1 2CH.082.00 A35

2CF.004.00 A1 2CH.083.00 A1

2CF.013.00 A1 2CH.090.00 A1

2CF.014.00 A1,

A36.x

to

A36.y

2CH.091.00 A1

2CF.014.01 A1,

A4,

A4a,

A4b

2CH.092.00 A1

2CF.015.00 A1 2CH.093.00 A1

2CF.016.00 A1 2CH.093.01 A35

2CF.017.00 A37 2CH.093.02 A35

2CF.018.00 A37 2CH.102.00 A1

2CF.019.00 A36.(y-1),

A36.y

2CH.103.00 A1

2CF.020.00 A1 2CH.104.00 A1

2CF.021.00 A1 2CH.105.00 A1

2CF.022.00 A1 2CH.106.00 A35

2CH.062.00 A37 2CH.107.00 A35

2CH.063.00 A37 2CH.177.00 A1






2CH.064.00 A37 2CH.178.00 A1

2CH.065.00 A37 2CH.179.00 A44a

2CH.066.00 A37 2CH.180.00 A28

2CH.067.00 A37 2CI.017.00 A34

2CH.068.00 A37 2CI.018.00 A34

2CH.069.00 A37 2CI.033.00 A1

2CH.070.00 A37 2CI.034.00 A1

2CH.071.00 A37 2CI.035.00 A42

2CH.072.00 A37 2CI.036.00 A42

2CH.072.01 A37 2CI.037.00 A43

2CH.072.02 A37 2CI.038.00 A43

2CH.073.00 A37 2CI.048.00 A1

2CH.074.00 A37 2CL.011.00 A1

2CH.074.01 A37 2CL.012.00 A1

2CH.075.00 A1

L2.11 - ENCIPHERED PIN not supported NO ENC PIN 2CC.004.02 A10 2CF.012.00 A1

L2.13.1 - The CCD application is able to detect that the Terminal is Offline Only

OFFLINE ONLY DETECT

2CH.118.00 A28 2CH.125.00 A28

2CH.123.00 A28 2CI.057.00 A29

2CH.124.00 A28 2CI.059.00 A29

L2.13.1 - The CCD application is not able to detect that the Terminal is Offline Only

NO OFFLINE ONLY DETECT

2CH.118.01 A28 2CH.125.01 A28

2CH.123.01 A28 2CI.056.00 A29

2CH.124.01 A28 2CI.058.00 A29

L2.13.1 - Can the CCD application be configured as an Online Only application?

ONLINE ONLY CRM 2CH.004.00 A1

L2.14.1 - APPLICATION BLOCK before 2nd GENERATE AC supported

APPLICATION BLOCK BEFORE

2CM.001.00 A1 2CM.002.00 A1

2CM.001.02 A1 2CM.003.00 A1

L2.14.2 - APPLICATION BLOCK after 2nd GENERATE AC supported

APPLICATION BLOCK AFTER

2CM.001.01 A1 2CM.002.01 A1

2CM.003.01 A1

L2.16.1 - CARD BLOCK before 2nd GENERATE AC supported

CARD BLOCK BEFORE

2CM.012.00 A1 2CM.013.00 A1

2CM.012.02 A1 2CM.014.00 A1

L2.16.2 - CARD BLOCK after 2nd GENERATE AC supported

CARD BLOCK AFTER

2CM.012.01 A1 2CM.013.01 A1

2CM.014.01 A1

L2.17.1 - PIN CHANGE UNBLOCK before 2nd GENERATE AC supported

PIN UNBLOCK BEFORE

2CM.023.00 A1 2CM.026.00 A1

2CM.024.00 A1 2CM.027.00 A1

2CM.025.00 A1






L2.17.2 - PIN CHANGE UNBLOCK after 2nd GENERATE AC supported

PIN UNBLOCK AFTER

2CM.023.01 A1 2CM.026.01 A1

2CM.024.01 A1 2CM.027.01 A1

2CM.025.01 A1

L2.19.1 - Additional SCRIPT Command with SMC before 2nd GENERATE AC supported

ADD SCRIPT WITH SMC BEFORE

2CM.075.00 A1 2CM.077.00 A1

2CM.076.00 A1 2CM.078.00 A1

L2.19.2 - Additional SCRIPT Command with SMC after 2nd GENERATE AC supported

ADD SCRIPT WITH SMC AFTER

2CM.075.01 A1 2CM.077.01 A1

2CM.076.01 A1 2CM.078.01 A1

L2.22 - LOG file not supported NO LOG 2CB.014.00 A1


LOG

2CA.025.00 A1 2CK.005.00 A1, A38.1, A38.2

2CB.013.00 A1 2CK.005.01 A1

2CK.001.00 A1, A38.1, A38.2

2CK.005.02 A1

2CK.003.00 A1, A39.1, A39.2, A39.3, A39.4

2CK.006.00 A1

2CK.004.00 A1, A39.1, A39.2, A39.3, A39.4

2CK.007.00 A1

L2.24.2 - included in the ARPC calculation (CSU Byte 1 bit 8 supported) supported

Prop Aut Data in ARPC

2CL.001.01 A51.x 2CL.008.01 A51.x

2CL.001.02 A51.x 2CL.009.01 A51.x

2CL.002.01 A51.x 2CL.010.01 A51.x

2CL.002.02 A51.x 2CL.015.01 A51.x

2CL.003.01 A51.x 2CL.016.01 A51.x

2CL.003.04 A51.x 2CL.017.01 A51.x

2CL.005.01 A51.x 2CL.018.01 A51.x

2CL.007.01 A51.x 2CL.019.01 A51.x

L2.32 - Issuer Application Data different from CCD

IAD different 2CG.002.01 A49








2CM.048.00 A5 2CM.050.00 A5

2CM.049.00 A5 2CM.051.00 A5



2CM.048.01 A5 2CM.050.01 A5

2CM.049.01 A5 2CM.051.01 A5



2CM.004.00 A5 2CM.005.00 A5



2CM.004.01 A5 2CM.005.01 A5


MAC5 & CARD BLOCK BEFORE

2CM.015.00 A5 2CM.016.00 A5


MAC5 & CARD BLOCK AFTER

2CM.015.01 A5 2CM.016.01 A5


MAC5 & PIN UNBLOCK BEFORE

2CM.028.00 A5 2CM.030.00 A5

2CM.029.00 A5 2CM.031.00 A5


MAC5 & PIN UNBLOCK AFTER

2CM.028.01 A5 2CM.030.01 A5

2CM.029.01 A5 2CM.031.01 A5



2CM.067.00 A5 2CM.068.00 A5



2CM.067.01 A5 2CM.068.01 A5



2CM.079.00 A5 2CM.080.00 A5



2CM.079.01 A5 2CM.080.01 A5

(L2.1.2 - MAC with length equal to 6) AND (L2.11 - ENCIPHERED PIN) AND (L2.17.1 - PIN CHANGE UNBLOCK


2CM.052.00 A6 2CM.054.00 A6

2CM.053.00 A6 2CM.055.00 A6






before 2nd GENERATE AC) supported



2CM.052.01 A6 2CM.054.01 A6

2CM.053.01 A6 2CM.055.01 A6



2CM.006.00 A6 2CM.007.00 A6



2CM.006.01 A6 2CM.007.01 A6



2CM.017.00 A6 2CM.018.00 A6



2CM.017.01 A6 2CM.018.01 A6



2CM.032.00 A6 2CM.034.00 A6

2CM.033.00 A6 2CM.035.00 A6



2CM.032.01 A6 2CM.034.01 A6

2CM.033.01 A6 2CM.035.01 A6



2CM.069.00 A6 2CM.070.00 A6



2CM.069.01 A6 2CM.070.01 A6



2CM.081.00 A6 2CM.082.00 A6



2CM.081.01 A6 2CM.082.01 A6



2CM.056.00 A7 2CM.058.00 A7

2CM.057.00 A7 2CM.059.00 A7








2CM.056.01 A7 2CM.058.01 A7

2CM.057.01 A7 2CM.059.01 A7



2CM.008.00 A7 2CM.009.00 A7



2CM.008.01 A7 2CM.009.01 A7



2CM.019.00 A7 2CM.020.00 A7



2CM.019.01 A7 2CM.020.01 A7



2CM.036.00 A7 2CM.038.00 A7

2CM.037.00 A7 2CM.039.00 A7



2CM.036.01 A7 2CM.038.01 A7

2CM.037.01 A7 2CM.039.01 A7



2CM.071.00 A7 2CM.072.00 A7



2CM.071.01 A7 2CM.072.01 A7



2CM.083.00 A7 2CM.084.00 A7



2CM.083.01 A7 2CM.084.01 A7



2CM.060.00 A8 2CM.062.00 A8

2CM.061.00 A8 2CM.063.00 A8



2CM.060.01 A8 2CM.062.01 A8

2CM.061.01 A8 2CM.063.01 A8








2CM.010.00 A8 2CM.011.00 A8



2CM.010.01 A8 2CM.011.01 A8



2CM.021.00 A8 2CM.022.00 A8



2CM.021.01 A8 2CM.022.01 A8



2CM.040.00 A8 2CM.042.00 A8

2CM.041.00 A8 2CM.043.00 A8



2CM.040.01 A8 2CM.042.01 A8

2CM.041.01 A8 2CM.043.01 A8



2CM.073.00 A8 2CM.074.00 A8



2CM.073.01 A8 2CM.074.01 A8



2CM.085.00 A8 2CM.086.00 A8



2CM.085.01 A8 2CM.086.01 A8

(L2.2 - PSE) AND (L2.22 - LOG file) supported

PSE & LOG 2CK.002.00 A1, A38.1, A38.2

(L2.7 - SDA) OR (L2.8 - DDA) OR (L2.9 - CDA) supported

SDA or DDA or CDA 2CD.007.00 A1


DDA & ENC PIN 2CA.006.00 A1 2CA.007.00 A1






(L2.8 - DDA) AND (L2.8.3 - Odd Key Length) supported

DDA & odd key 2CE.002.01 A4c

(L2.8 - DDA) OR (L2.9 - CDA) OR ((L2.11 - ENCIPHERED PIN) AND (L2.11.2 - Enciphered PIN and DDA/CDA use the same ICC Public key)) supported

DDA or CDA or (ENC PIN & same key)

2CD.005.00 A1,

A4

((L2.8 - DDA) OR (L2.9 - CDA)) AND ((L2.11 - ENCIPHERED PIN) AND (L2.11.1 - Enciphered PIN and DDA/CDA can have different ICC Public key) supported

(DDA or CDA) & ENC PIN & different key

2CF.014.04 A1

((L2.8 - DDA) OR (L2.9 - CDA)) AND ((L2.11 - ENCIPHERED PIN) AND (L2.11.2 - Enciphered PIN and DDA/CDA can have same ICC Public key) supported

(DDA or CDA) & ENC PIN & same key

2CF.014.03 A50


CDA & ENC PIN 2CA.010.00 A1


CDA & SCRIPT BEFORE 2CA.018.00 A1


CDA & EMV SCRIPT BEFORE & ADD SCRIPT BEFORE

2CA.018.02 A1


CDA & SCRIPT AFTER 2CA.018.01 A1


CDA & EMV SCRIPT AFTER & ADD SCRIPT AFTER

2CA.018.03 A1


CDA & PIN UNBLOCK BEFORE & ADD SCRIPT BEFORE

2CA.018.04 A1


CDA & PIN UNBLOCK AFTER & ADD SCRIPT AFTER

2CA.018.05 A1

(L2.9 - CDA) AND (L2.22 - LOG file) supported

CDA & LOG 2CA.025.01 A1

(L2.9 - CDA) AND (L2.4 - PDOL) CDA & PDOL 2CG.011.00 A17






supported

(L2.9 - CDA) AND (L2.9.3 - Odd Key Length) supported

CDA & odd key 2CG.003.01 A4c

(L2.11 - ENCIPHERED PIN) AND ((L2.13.1 - The CCD application is able to detect that the Terminal is Offline Only) OR (L2.13.2 - The CCD application is able to detect that the Terminal is Online Capable)) supported

ENC PIN & (ONLINE CAPABLE DETECT OR OFFLINE ONLY DETECT)

2CI.043.00 A1 2CI.045.00 A42

2CI.044.00 A1 2CI.046.00 A42

(L2.11 - ENCIPHERED PIN) AND ((L2.13.1 - The CCD application is not able to detect that the Terminal is Offline Only) AND (L2.13.2 - The CCD application is not able to detect that the Terminal is Online Capable)) supported

ENC PIN & (NO ONLINE CAPABLE DETECT & NO OFFLINE ONLY DETECT)

2CI.039.00 A1 2CI.041.00 A42

2CI.040.00 A1 2CI.042.00 A42

(L2.11 - ENCIPHERED PIN) AND (L2.11.5 - Odd Key Length) supported

ENC PIN & odd key 2CF.014.02 A4c

(L2.11 - ENCIPHERED PIN) AND (L2.17.1 - PIN CHANGE UNBLOCK before 2nd GENERATE AC) supported

ENC PIN & PIN UNBLOCK BEFORE

2CM.046.00 A1 2CM.044.00 A1

2CM.047.00 A1 2CM.045.00 A1

(L2.11 - ENCIPHERED PIN) AND (L2.17.2 - PIN CHANGE UNBLOCK after 2nd GENERATE AC) supported

ENC PIN & PIN UNBLOCK AFTER

2CM.046.01 A1 2CM.044.01 A1

2CM.047.01 A1 2CM.045.01 A1

(L2.11 - ENCIPHERED PIN) AND (L2.24.2 - included in the ARPC calculation (CSU Byte 1 bit 8 supported)) supported

ENC PIN & Prop Aut Data in ARPC

2CL.011.01 A51.x 2CL.012.01 A51.x

(L2.13.1 - The CCD application is able to detect that the Terminal is Offline Only) OR (L2.13.2 - Is the CCD application is able to detect that the Terminal is Online Capable)

OFFLINE ONLY DETECT or ONLINE CAPABLE DETECT

2CI.006.00 A1 2CI.031.00 A42

2CI.007.00 A42 2CI.032.00 A42

2CI.013.00 A1 2CI.054.00 A1

2CI.014.00 A42 2CI.055.00 A42

2CI.029.00 A1 2CI.066.00 A1

2CI.030.00 A1 2CI.067.00 A42

(L2.13.1 - The CCD application is not able to detect that the Terminal is Offline Only) AND (L2.13.2 - Is the CCD application is not able to detect that the Terminal is Online Capable) supported

NO OFFLINE ONLY DETECT & NO ONLINE CAPABLE DETECT

2CI.004.00 A1 2CI.027.00 A42

2CI.005.00 A42 2CI.028.00 A42

2CI.011.00 A1 2CI.052.00 A1

2CI.012.00 A42 2CI.053.00 A42

2CI.025.00 A1 2CI.064.00 A1

2CI.026.00 A1 2CI.065.00 A42

(L2.14.1 OR L2.15.1 OR L2.16.1 OR L2.17.1 OR L2.18.1 OR L2.19.1) – Issuer Script before 2nd GENERATE AC AND (L2.20 - CVR bits ‘Number of Issuer Script commands reset after successful Authentication) supported

SCRIPT BEFORE & RESET SCRIPT

2CH.133.00 A1 2CH.133.02 A29






(L2.14.1 OR L2.15.1 OR L2.16.1 OR L2.17.1 OR L2.18.1 OR L2.19.1) – Issuer Script before 2nd GENERATE AC supported

SCRIPT BEFORE

2CA.016.00 A1 2CH.137.00 A1

2CA.017.00 A1 2CH.138.00 A45

2CH.139.00 A1

2CH.131.00 A1 2CH.140.00 A47

2CH.134.00 A1 2CI.060.00 A1

2CH.135.00 A44 2CI.061.00 A43

2CH.136.00 A44

(L2.14.1 OR L2.15.1 OR L2.16.1 OR L2.17.1 OR L2.18.1 OR L2.19.1) – Issuer Script before 2nd GENERATE AC supported AND (L2.20 - CVR bits ‘Number of Issuer Script commands reset after successful Authentication) not supported

SCRIPT BEFORE & NO RESET SCRIPT

2CH.129.00 A1 2CH.127.00 A1

(L2.14.1 OR L2.15.1 OR L2.16.1 OR L2.17.1) AND (L2.18.1 OR L2.19.1) – Issuer Script before 2nd GENERATE AC supported

EMV SCRIPT BEFORE & ADD SCRIPT BEFORE

2CA.017.02 A1

(L2.14.2 OR L2.15.2 OR L2.16.2 OR L2.17.2 OR L2.18.2 OR L2.19.2) – Issuer Script after 2nd GENERATE AC AND (L2.20 - CVR bits ‘Number of Issuer Script commands reset after successful Authentication) supported

SCRIPT AFTER & RESET SCRIPT

2CH.133.01 A1 2CH.133.03 A29

(L2.14.2 OR L2.15.2 OR L2.16.2 OR L2.17.2 OR L2.18.2 OR L2.19.2) – Issuer Script after 2nd GENERATE AC supported

SCRIPT AFTER

2CA.016.01 A1 2CH.137.01 A1

2CA.017.01 A1 2CH.138.01 A45

2CH.139.01 A1

2CH.132.00 A1 2CH.140.01 A47

2CH.134.01 A1 2CI.060.01 A1

2CH.135.01 A44 2CI.061.01 A43

2CH.136.01 A44

(L2.14.2 OR L2.15.2 OR L2.16.2 OR L2.17.2 OR L2.18.2 OR L2.19.2) – Issuer Script after 2nd GENERATE AC supported AND (L2.20 - CVR bits ‘Number of Issuer Script commands reset after successful Authentication) not supported

SCRIPT AFTER & NO RESET SCRIPT

2CH.130.00 A1 2CH.128.00 A1

(L2.14.2 OR L2.15.2 OR L2.16.2 OR L2.17.2) AND (L2.18.2 OR L2.19.2) – Issuer Script after 2nd GENERATE AC supported

EMV SCRIPT AFTER & ADD SCRIPT AFTER

2CA.017.03 A1

((L2.14.2 – APPLICATION BLOCK after 2nd GENERATE AC) OR (L2.14.1 – APPLICATION BLOCK before 2nd GENERATE AC) supported

APPLICATION BLOCK AFTER OR APPLICATION BLOCK BEFORE

2CB.011.00 A1






((L2.14.2 - APPLICATION BLOCK after 2nd GENERATE AC) OR (L2.14.1 - APPLICATION BLOCK before 2nd GENERATE AC)) AND (L2.22 - LOG file) supported

(APPLICATION BLOCK BEFORE OR APPLICATION BLOCK AFTER) & LOG

2CK.008.00 A1

((L2.14.2 – APPLICATION BLOCK after 2nd GENERATE AC) OR (L2.14.1 – APPLICATION BLOCK before 2nd GENERATE AC)) AND (L2.3.1 - More than one CCD applications AIDs) supported

(APPLICATION BLOCK AFTER OR APPLICATION BLOCK BEFORE) & multiapp

2CB.011.01 A1

((L2.16.2 – CARD BLOCK after 2nd GENERATE AC) OR (L2.16.1 – CARD BLOCK before 2nd GENERATE AC)) AND (L2.3.1 - More than one CCD applications AIDs) supported

(CARD BLOCK AFTER OR CARD BLOCK BEFORE) & multiapp

2CB.009.01 A1

((L2.16.2 – CARD BLOCK after 2nd GENERATE AC) OR (L2.16.1 – CARD BLOCK before 2nd GENERATE AC)) supported

CARD BLOCK AFTER OR CARD BLOCK BEFORE

2CB.009.00 A1

(L2.17.1 - PIN CHANGE UNBLOCK) AND (L2.18.1 OR L2.19.1 - Additional script) before 2nd GENERATE AC supported

PIN UNBLOCK BEFORE & ADD SCRIPT BEFORE

2CA.017.04 A1

(L2.17.2 - PIN CHANGE UNBLOCK) AND (L2.18.2 OR L2.19.2) – Issuer Script after 2nd GENERATE AC supported

PIN UNBLOCK AFTER & ADD SCRIPT AFTER

2CA.017.05 A1

(L2.18.1 AND L2.18.2)- Additional SCRIPT Command without SMC before 2nd GENERATE AC supported


2CM.064.00 A1 2CM.066.00 A1

(L2.18.1 AND L2.18.2 AND L2.18.5) - Additional SCRIPT Command with tag '81' (SMI) before 2nd GENERATE AC supported

ADD SCRIPT WITH SMI BEFORE

2CM.065.00 A1

(L2.18.1 AND L2.18.3 ) - Additional SCRIPT Command without SMC after 2nd GENERATE AC supported

ADD SCRIPT WITHOUT SMC AFTER

2CM.064.01 A1 2CM.066.01 A1

(L2.18.1 AND L2.18.3 AND L2.18.5) - Additional SCRIPT Command with tag '81' (SMI) after 2nd GENERATE AC supported

ADD SCRIPT WITH SMI AFTER

2CM.065.01 A1






6.3 Non Regression tests on ‘not activated’ options: when

option is supported but not used

A CCD application may have options implemented, but not used, either not personalized or not activated. The following tests and associated card images has to be run to be sure that when an option is not personalised (or activated), it has no impact on the CCD application.

ICS Questions CCD

Configuration

Test

Case

Image Test

Case

Image

None None 2CA.001.00 A10

L2.2 - PSE supported PSE 2CA.022.00 A2 2CB.012.00 A2

L2.4 - PDOL supported PDOL 2CC.002.00 A52

L2.7 - SDA supported SDA 2CC.005.01 A19a

L2.8 - DDA supported DDA 2CA.001.00 A27 2CA.003.00 A10

2CA.002.00 A27 2CC.006.01 A27


CDA

2CA.001.00 A27a 2CA.019.00 A27a

2CA.002.00 A27a 2CC.007.01 A27a

2CA.008.00 A10

L2.11 - ENCIPHERED PIN supported ENC PIN 2CA.001.00 A20 2CA.002.00 A20


LOG

2CA.001.00 A13 2CA.019.00 A13

2CA.002.00 A13 2CA.025.00 A10

(L2.7 - SDA) AND ((L2.8 - DDA) OR (L2.9 - CDA) OR ((L2.11 - ENCIPHERED PIN) AND (L2.11.2 - Enciphered PIN and DDA/CDA use the same ICC Public key))) supported

SDA & (DDA or CDA or (ENC PIN & same key))

2CD.005.00 A19a

(L2.7 - SDA) AND ((L2.8 - DDA) OR (L2.9 - CDA) OR (L2.11 - ENCIPHERED PIN)) supported

SDA & (DDA or CDA or ENC PIN)

2CD.004.00 A27b

(L2.8 - DDA) AND ((L2.9 - CDA) OR (L2.11 - ENCIPHERED PIN)) supported

DDA & (CDA or ENC PIN)

2CE.002.00 A19

(L2.8 - DDA) AND (L2.9 - CDA) supported

DDA & CDA

2CA.003.00 A27a 2CA.008.00 A27

2CA.004.00 A27a 2CA.009.00 A27

(L2.8 - DDA) AND (L2.9 - CDA) AND (L2.11 - ENCIPHERED PIN) supported

DDA & CDA & ENC PIN 2CA.006.00 A27a 2CG.003.00 A18a






2CE.002.00 A19b

(L2.8 - DDA) AND (L2.9 - CDA) AND (L2.22 - LOG file) supported

DDA & CDA & LOG 2CA.025.01 A27

(L2.8 - DDA) AND (L2.9 - CDA) AND (L2.14.2 – Issuer Script after 2nd GENERATE AC) supported

DDA & CDA & SCRIPT AFTER

2CA.018.01 A18

(L2.8 - DDA) AND (L2.9 - CDA) AND (L2.14.1 – Issuer Script before 2nd GENERATE AC) supported

DDA & CDA & SCRIPT BEFORE

2CA.018.00 A18


DDA & ENC PIN

2CA.003.00 A20 2CA.006.00 A10

2CA.004.00 A20

(L2.8 - DDA) AND (L2.22 - LOG file) supported

DDA & LOG 2CA.025.00 A27 2CA.003.00 A13

2CA.004.00 A13

(L2.8 - DDA) AND (L2.11 - ENCIPHERED PIN) AND (L2.22 - LOG file) supported

DDA & ENC PIN & LOG

2CA.006.00 A13

(L2.8 - DDA) AND (L2.14.2 – Issuer Script after 2nd GENERATE AC) supported

DDA & SCRIPT AFTER 2CA.017.01 A27

(L2.8 - DDA) AND (L2.14.1 – Issuer Script before 2nd GENERATE AC) supported

DDA & SCRIPT BEFORE 2CA.017.00 A27

((L2.8 - DDA) OR (L2.9 - CDA)) AND (L2.11 - ENCIPHERED PIN) supported

(DDA or CDA) & ENC PIN

2CF.014.01 A19c

((L2.8 - DDA) OR (L2.11 - ENCIPHERED PIN)) AND (L2.9 - CDA) supported

(DDA or ENC PIN) & CDA

2CG.003.00 A18


CDA & ENC PIN 2CA.008.00 A20 2CA.009.00 A20

(L2.9 - CDA) AND (L2.11 - ENCIPHERED PIN) AND (L2.22 - LOG file) supported

CDA & ENC PIN & LOG 2CA.025.01 A20

(L2.9 - CDA) AND (L2.11 - ENCIPHERED PIN) AND (L2.14.2 OR L2.15.2 OR L2.16.2 OR L2.17.2 OR L2.18.2 OR L2.19.2 – Issuer Script after 2nd GENERATE AC) supported

CDA & ENC PIN & SCRIPT AFTER

2CA.018.01 A20

(L2.9 - CDA) AND (L2.11 - ENCIPHERED PIN) AND (L2.14.1 OR L2.15.1 OR L2.16.1 OR L2.17.1 OR L2.18.1 OR L2.19.1 – Issuer Script before 2nd GENERATE AC) supported

CDA & ENC PIN & SCRIPT BEFORE

2CA.018.00 A20






(L2.9 - CDA) AND (L2.22 - LOG file) supported

CDA & LOG

2CA.008.00 A13 2CA.025.00 A27a

2CA.009.00 A13 2CA.025.01 A10


CDA & SCRIPT AFTER 2CA.017.01 A27a

(L2.9 - CDA) AND (L2.14.2 OR L2.15.2 OR L2.16.2 OR L2.17.2 OR L2.18.2 OR L2.19.2 – Issuer Script after 2nd GENERATE AC) AND (L2.22 - LOG file) supported

CDA & SCRIPT AFTER & LOG

2CA.018.01 A13


CDA & SCRIPT BEFORE 2CA.017.00 A27a

(L2.9 - CDA) AND (L2.14.1 OR L2.15.1 OR L2.16.1 OR L2.17.1 OR L2.18.1 OR L2.19.1 – Issuer Script before 2nd GENERATE AC) AND (L2.22 - LOG file) supported

CDA & SCRIPT BEFORE & LOG

2CA.018.00 A13

(L2.11 - ENCIPHERED PIN) AND (L2.22 - LOG file) supported

ENC PIN & LOG 2CA.025.00 A20

(L2.11 - ENCIPHERED PIN) AND (L2.14.2 OR L2.15.2 OR L2.16.2 OR L2.17.2 OR L2.18.2 OR L2.19.2) – Issuer Script after 2nd GENERATE AC supported

ENC PIN & SCRIPT AFTER

2CA.017.01 A20

(L2.11 - ENCIPHERED PIN) AND (L2.14.1 OR L2.15.1 OR L2.16.1 OR L2.17.1 OR L2.18.1 OR L2.19.1) – Issuer Script before 2nd GENERATE AC supported

ENC PIN & SCRIPT BEFORE

2CA.017.00 A20

(L2.14.1 OR L2.15.1 OR L2.16.1 OR L2.17.1 OR L2.18.1 OR L2.19.1) – Issuer Script before 2nd GENERATE AC AND (L2.22 - LOG file) supported

SCRIPT BEFORE & LOG 2CA.017.00 A13

(L2.14.2 OR L2.15.2 OR L2.16.2 OR L2.17.2 OR L2.18.2 OR L2.19.2) – Issuer Script after 2nd GENERATE AC AND (L2.22 - LOG file) supported

SCRIPT AFTER & LOG 2CA.017.01 A13






7 Card Images for Level 1 Testing

To perform the Level 1 test cases according to [N7], the following Card Image is requested: Card Image A4.






Annex A Example of a CPA simple CCD-compliant

profile

This section describes the example of a CPA card personalized as simple-CCD profile according to the Common Payment Application Specification, version 1.0 – December 2005, Annex H11 Example of a simple CCD-Complaint Profile. We list here the corresponding ICS, the set of Card Images and the associated quantities that an application provider needs to deliver to the accredited laboratories for testing.

A.1 ICS of a CPA simple-CCD compliant profile Below is the ICS (Implementation Conformance Statement) filled according to CPA specification and its Annex H11. As this apendix does not describes all options, in this ICS we have made some choices, which may differ from a CPA simple CCD-compliant profile to another one. These options are marked in red in the ICS.

L2 - EMV Level 2

Version & Cryptogram Confirmation L2.1 - MAC longer

than 4 supported?

Yes No

L2.1.1 - Is MAC with length equal to 5 supported?

Yes No


Yes No


Yes No


Yes No






Application Selection

L2.2 - PSE

supported?

Yes No

SELECT Command

L2.2.1 - FCI Maximum Length

240

READ RECORD Command

L2.2.2 - SFI value(s) for the Directory Elementary File

1 to 10

L2.2.3 - Number of Records supported

1 to 16

L2.2.4 - Maximum Record size (bytes per record)

254

L2.2.5 - Minimum Record size (bytes per record)

0

L2.2.6 - How many template ‘61’ can be loaded in Records

Up to 6 per record

ADF L2.3.1 - How many AIDs are supported per CCD application?

1

SELECT Command

L2.3.2 - FCI Maximum Length

240

Initiate Application Processing (GPO)

L2.4 - PDOL

supported?

Yes No

PDOL Management

L2.4.1 -How many PDOL are supported (count only those that affect CCD behaviour)

L2.4.2 - Content of PDOL (list only those that affect CCD behaviour)

L2.4.3 -How many PDOL related data set (per PDOL) are supported (count only those that affect CCD behaviour)

L2.4.4 - Value of PDOL data (list only those that affect CCD behaviour)**

L2.4.5 - PDOL related data making the transaction initialisation to be rejected (if existing)

L2.4.6 - Can this option be not activated (or not personalised)?

Yes No






Read Application Data

READ RECORD

Command

L2.5.1 - [SFI 11 to 20] range supported

Yes No

L2.5.2 - [SFI 21 to 30] range supported

Yes No

L2.5.3 -List the SFI value(s) supported (all ranges)

1 to 30

L2.5.4 – Number of Records supported

1 to 16

L2.5.5 - Maximum Record size (bytes per record)

254

L2.5.6 - Minimum Record size (bytes per record)

0

Data Authentication

Public Keys L2.6.1 - Maximum CA Public Key length

1408 bits

L2.6.2 - Maximum Issuer Public Key length

1152 bits

L2.7 – SDA

supported? *

Yes No

L2.8 - DDA

supported? *

Yes No

L2.8.1 - Maximum ICC Public Key Length

1152 bits

L2.8.2 - If Maximum key size is different from the pre-determined EMVCo test keys please provide ICC public key value for testing

Modulus: NA Exponent: NA Index: NA

L2.8.3 - Odd Key Length supported

Yes No

L2.8.4 Can this option be not activated (or not personalised)?

Yes No

L2.9 - CDA

supported? *

Yes No

L2.9.1 - Maximum ICC Public Key length

1152 bits




Yes No


Yes No

Note: * At least one of the options must be supported






Cardholder Verification

VERIFY

Command

L2.10.1 - PIN lengths supported

4 to 12

L2.10.2 - PIN Try Limit values supported

0 to 16

L2.11 -

ENCIPHERED

PIN supported?

Yes No

L2.11.1 - If Enciphered PIN and DDA/CDA supported can the ICC Public key be different?

Yes No

L2.11.2 - If Enciphered PIN and DDA/CDA supported can the ICC Public key be the same?

Yes No

L2.11.3 - Maximum ICC Public Key length

1152 bits




Yes No


Yes No






Card Action Analysis

CDOL

Management

L2.12.1 - How many CDOL1/CDOL2 related data are supported (count only those that affect CCD behaviour)

1

L2.12.2 - Content of CDOL1 (list only those that affect CCD behaviour)

NA

L2.12.3 - Content of CDOL2 (list only those that affect CCD behaviour)

NA

L2.12.4 - Value of CDOL1 data (list only those that affect CCD behaviour)**

NA

L2.12.5 - Value of CDOL2 data (list only those that affect CCD behaviour)**

NA

L2.12.6 - Group of PDOL/CDOL1/CDOL2 by CCD behaviour

NA

GENERATE AC

Command

L2.13.1 - Is the CCD application able to detect that the Terminal is Offline Only?

Yes No

L2.13.2 - Is the CCD application able to detect that the Terminal is Online Capable?

Yes No

L2.13.3 – Can the CCD application be configured as an Online Only application?

Yes No

** For example if the CDOL1 requests the Terminal Type, the CCD application may have different behaviour depending if it is an Offline Only terminal or if it is an Online/Offline Terminal. In that case, there are two different behaviours; therefore, both terminal types must be listed in this ICS section.






Issuer Scripts

APPLICATION

BLOCK

Command

L2.14.1 - Supported before 2

nd GENERATE AC?

Yes No

L2.14.2 - Supported after 2nd

GENERATE AC?

Yes No

L2.14.3 - Second nibble range of the CLA byte (with first nibble is ‘8’) supported (different from ‘C’)

None

APPLICATION

UNBLOCK

Command


nd GENERATE AC?

Yes No


GENERATE AC?

Yes No


None

CARD BLOCK

Command


nd GENERATE AC?

Yes No


GENERATE AC?

Yes No


None

PIN CHANGE /

UNBLOCK

Command


nd GENERATE AC?

Yes No


GENERATE AC?

Yes No


None

L2.20 – Can the

CVR bits

‘Number of

Issuer Script

commands’ be

reset after

successful

Authentication?

Yes No






Additional

SCRIPT

Command

without Secure

Messaging for

Confidentiality

(without tag ‘87’)

L2.18.5 - List of script commands


nd

GEN AC?

L2.18.2 - Supported after 2

nd

GEN AC?


L2.18.4 - Additional SCRIPT Command with tag ‘81’ supported?

None Yes No

Yes No

None Yes No

Yes No

Yes No

Yes No

Yes No

Yes No

Yes No

Additional

SCRIPT

Command with

Secure

Messaging for

Confidentiality

(with tag ‘87’)

L2.19.4 - List of script commands


nd

GEN AC?

L2.19.2 - Supported after 2

nd

GEN AC?


None Yes No

Yes No

None

Yes No

Yes No

Yes No

Yes No

Log

L2.22 - LOG file

supported?

Yes No

L2.22.1 - SFI value(s) supported for the Log File

21 to 30

L2.22.2 - Records numbers supported for the Log File

1 to 10

L2.22.3 - List the different Log Entry(s) supported

9F4D02A809 9F4D02A909

L2.22.4 - List the different Log Format(s) supported

9F4F119F02065F2A029A039F52029F36029F2701


Yes No






Specific Data

ATC L2.23.1 - ATC range 0 to ‘FFFF’

L2.23.2 - Maximum value of the ATC

‘FFFF’

CSU L2.23.3 - CSU Issuer discretionary data

None

L2.24 -

Proprietary

Authentication

Data (longer than

zero) supported?

Yes No

L2.24.1 - What is (are) the length(s) supported?

L2.24.2 - Can it be included in the ARPC calculation (CSU Byte 1 bit 8 supported)?

Yes No

L2.24.3 - What is (are) the Proprietary Authentication Data Value(s), or how it is calculated?

Currency Code X L2.23.4 - What is the currency X (international) used by the test cards?

All except Domestic Currency Code 0978

Currency Code Y L2.23.5 - What is the currency Code Y (Domestic) used by the test cards?

0978






Beyond CCD components Check-list

L2.25 - Are EMV

Reserved Tags

used?

Yes No

L2.25.1 - List Reserved Tags and formats of the associated data objects

‘9F36’, ‘9F4F’, ‘9F17’

L2.26 – Are

Payment Scheme

Reserved Tags

used?

Yes No

L2.26.1 - List Reserved Tags and formats of the associated data objects

‘9F52’,‘9F74’, 9F79’, 9F7A’, ‘9F50’, ‘9F77’, ‘9F78’, ‘9F7E’

L2.27 - Are EMV

Reserved Tags

retrievable by

GET DATA?

Yes No

L2.27.1 - List Reserved Tags retrievable by GET DATA

‘9F36’, ‘9F4F’, ‘9F17’

L2.28 – Are

Payment Scheme

Reserved Tags

retrievable by

GET DATA?

Yes No

L2.28.1 List Reserved Tags retrievable by GET DATA

‘9F50’, ‘9F77’, ‘9F78’, ‘9F7E’

L2.29 - Issuer

Application Data

different from

CCD one?

Yes No

L2.29.1 - Describe the 32 bytes of Issuer Application Data (Counter, Issuer Discretionary Data ,…)

APPLICATION

UNBLOCK

Command

L2.30.1 - What is the procedure to perform an APPLICATION UNBLOCK (if supported)?

SELECT, GET PROCESSING OPTIONS GENERATE AC requesting AAC Application UNBLOCK

SELECT

Command

L2.31.1 - NON CCD CLA byte value(s) supported

None

L2.31.2 - NON CCD P1/P2 bytes value(s) supported

None

READ RECORD

Command

READ RECORD used during PSE Selection (if supported)


None


None

READ RECORD used during Read Application Data


None


None

GET

PROCESSING

OPTIONS

Command

L2.32.1 - NON CCD second nibble value(s) of the CLA byte (with first nibble is ‘8’) supported

None

GENERATE AC

Command

L2.33.1 - Second nibble range of the CLA byte (with first nibble is ‘8’) supported

None






INTERNAL

AUTHENTICATE

Command

(if DDA is

supported)


None


None

VERIFY

Command


None


None

GET

CHALLENGE

Command

(if DDA is

supported)


None


None

GET DATA

Command


None


See CPA Specification Annex J

Non EMV

Commands

L2.38.1 - Does the CCD Application support Non EMV Commands? (other than Proprietary Script Commands)

Yes No

L2.38.2 - Please list all supported pairs of CLA/INS (when CLA byte has one of the following values: ‘00’, ’04, ‘08’, ‘0C’, ‘80’, ‘84’ ‘88’, ‘8C’, ‘9x’ or ‘Ex’)

NA






A.2 CPA simple CCD-compliant profile: list of options supported

according to ICS

Options supported Options Description

ADD SCRIPT WITH SMI AFTER Additional (non EMV) script command with Secure Messaging for Integrity after the 2nd GENERATE AC

ADD SCRIPT WITH SMI BEFORE Additional (non EMV) script command with Secure Messaging for Integrity before the 2nd GENERATE AC

ADD SCRIPT WITHOUT SMC AFTER

Additional (non EMV) script command without Secure Messaging for Confidentiality after the 2nd GENERATE AC command


Additional (non EMV) script command without Secure Messaging for Confidentiality before the 2nd GENERATE AC command

CDA Combined DDA/AC supported

DDA Dynamic Data Authentication supported

Different Keys DDA or CDA and Enciphered PIN using different Public/Private keys

ENC PIN Enciphered PIN supported

No LOG Log File not supported

OFFLINE ONLY DETECT able to Detect Online Capable Terminal

ONLINE CAPABLE DETECT able to Detect Online Capable Terminal or able to Detect Offlline Only Terminal

Odd Keys Odd Public/private Key Length

PIN UNBLOCK AFTER PIN UNBLOCK script command after the 2nd GENERATE AC command

PIN UNBLOCK BEFORE PIN UNBLOCK script command before the 2nd GENERATE AC command

PSE PSE

PDOL Get Processing Options using PDOL

Same Keys DDA or CDA and Enciphered PIN using same Public/Private keys

SCRIPT AFTER Script (EMV or non EMV) command after the 2nd GENERATE AC

SCRIPT BEFORE Script (EMV or non EMV) command before the 2nd GENERATE AC

SDA Static Data Authentication

SFI 11-20 Record File with SFI 11-20 supported

SFI 21-30 Record File with SFI 21-30 supported






A.3 Card Images and associated quantities related to these

options:

Image Quantities

1 14

2 1

3 1

4 1

9 1

10 1

11 1

12 1

14 1

15 1

16 1

18 1

19 1

20 5

21 1

22 1

23 1

24 1

25 1

26 1

27 5

28 1

29 1

30 1

31 1

32 1

34 4

35 1

36 1

37 1

40 1

41 1

42 1

43 1

44 1

45 1

47 1

50 1

4a 1

4b 1

18a 1

19a 1

19b 1

19c 1

20a 1

27a 3






27b 1

42a 1

42b 1

44a 1

4c 1

9a 1






*** END OF DOCUMENT ***

Documents

Card Type Approval - EMVCo Type Approval CCD Level 1 and Level 2 Card Images Requirements ... ONLINE ONLY CRM: CCD application that can only go online and that cannot be set