topic Re: SCP03 key version in Secure Authentication

SCP03 key version

deang — Thu, 10 Aug 2023 14:27:26 GMT

Is there any information on how to set/use the key version when rotating SCP03 keys and using them? In nxScp03_CP_InitializedUpdate() (in se05x_APDU_impl.c) the key version is set here:

tlvHeader_t hdr = {{CLA_GP_7816, INS_GP_INITIALIZE_UPDATE, keyVersion, 0x00}};

For SCP03 the version is 0xB. If I rotate the SCP03 keys should this number change?

I'm using the NXP Nano package.

Dean

Re: SCP03 key version

Kan_Li — Fri, 11 Aug 2023 08:35:07 GMT

Hi @deang ,

The key version number (KVN) is the identifier of the slot where the key is stored. It shall stay the same, the existing key should get exchanged on the key rotation to overwrite the previously stored default key.

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

Re: SCP03 key version

deang — Fri, 18 Aug 2023 14:28:21 GMT

Thanks @Kan_Li

Dean