Keyple Test Kit - Calypso Prime Profile - PKI mode

- the sample have to include at least the applications 1, 2 & 3

- for the application 3, two different sizes of filestructure are possible depending on the

memory capacity

- if supported by the platform the application 4 could be added to the 1, 2, 3

- if supported by the platform the application 5 could be added to the 1, 2, 3, 4

Extended mode supported by all applications

PKI mode supported by the applications 2, 4 & 5

AES keysets for all applications

PIN feature supported & shared by all applications

Stored Value supported by applications 1, 2 & 4 only

Calypso Prime PKI Profile - Application 1

Type:

Calypso Stored Value

AID:

A000000291 FF 9201h

Startup:

Session Modifications:

highest referenced value supported by the product

Application Type:

coding {PKI mode not supported} / {Extended mode supported} / {with Calypso stored value} / {with Calypso PIN} / {ratification mode: as supported by the product}

Application SubType:

20h

referenced Calypso file structure '20h': Stored Value

AES Calypso keyset:

KIF

KVC

ALG

diversified from

issued from the 'Calypso SAM-TEST-F5v8'

#1 Issuer

01h

74h

A0h

MK_SV1_A1

#2 Load

07h

74h

A0h

MK_SV2_A1

shared Calypso  PIN:

30303030h

"0000"

#3 Debit

10h

74h

A0h

MK_SV3_A1

File structure:

Group 0

Group 1

Group 2

Group 3

EF Sharing

File

Type

LID

SFI

Rec. Num.

Rec. Size

Read Rehabilitate

Update Invalidate

Write Decrease

Append Increase

Data Ref.

DF

DF

1000h

-

-

-

Session 1

Session 3

-

-

-

Load Log

Cyclic

1014h

14h

1

29

Always

Never

Never

Never

-

Purchase Log

Cyclic

1015h

15h

3

29

Always

Never

Never

Never

-

Calypso Prime PKI Profile - Application 2

Type:

Calypso Transport

AID:

A000000291 FF 9101h

Startup:

Session Modifications:

highest referenced value supported by the product

Application Type:

coding {PKI mode supported} / {Extended mode supported} / {with Calypso stored value} / {with Calypso PIN} / {ratification mode: as supported by the product}

Application SubType:

02h

referenced Calypso file structure '02h': Revision 2 Minimum with MF files

AES Calypso keyset:

KIF

KVC

ALG

diversified from

issued from the 'Calypso SAM-TEST-F5v8'

#1 Issuer

21h

74h

A0h

MK_RT1_A1

#2 Load

27h

74h

A0h

MK_RT2_A1

shared Calypso  PIN:

30303030h

"0000"

#3 Debit

30h

74h

A0h

MK_RT3_A1

PKI settings:

PO Key Pair (ECC)

not initialized

CACert

not initialized

POCert

not initialized

File structure:

Group 0

Group 1

Group 2

Group 3

EF Sharing

File

Type

LID

SFI

Rec. Num.

Rec. Size

Read Rehabilitate

Update Invalidate

Write Decrease

Append Increase

Data Ref.

DF

DF

2000h

-

-

-

Session 1

Session 3

-

-

-

ICC

Linear

2002h

02h

1

29

Always

Never

Session 1

-

-

ID

Linear

2003h

03h

1

29

PIN

Session 2

Never

-

-

Environment

Linear

2001h

07h

1

29

Always

Session 1

Never

-

-

Events Log

Cyclic

2010h

08h

3

29

Always

Session 3

Session 3

Session 3

-

Special Events

Linear

2040h

1Dh

1

29

Always

Session 3

Never

-

-

Contract List

Linear

2050h

1Eh

1

29

Always

Session 3

Never

-

-

Contracts

Linear

2020h

09h

4

29

Always

Session 2

Session 3

-

-

Counters

Counters

2069h

19h

1

29

Always

Session 2

Session 3

Session 2

-

Initial data:

File

Rec. Num

Size

Pre-personalized data

Contracts (2020h / 09h)

1

29

00000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFh

2

3

4

Calypso Prime PKI Profile - Application 3

'Nominal configuration'

Type:

Calypso Interoperable Application

AID:

A000000291 A00000 01 9102h

Startup:

Session Modifications:

highest Calypso referenced value supported by the product

Application Type:

coding {PKI mode not supported} / {Extended mode supported} / {without Calypso stored value} / {with Calypso PIN} / {ratification mode: as supported by the product}

Application SubType:

0Dh

referenced Calypso file structure '0Dh': Hoplink configuration '0Dh' with picture files

AES Calypso keyset:

KIF

KVC

ALG

diversified from

issued from the 'Calypso SAM-TEST-F5v8'

#1 Issuer

21h

09h

A0h

MK_RT1_A3

#2 Load

27h

09h

A0h

MK_RT2_A3

shared Calypso  PIN:

30303030h

"0000"

#3 Debit

30h

09h

A0h

MK_RT3_A3

File structure:

Group 0

Group 1

Group 2

Group 3

EF Sharing

File

Type

LID

SFI

Rec. Num.

Rec. Size

Read Rehabilitate

Update Invalidate

Write Decrease

Append Increase

Data Ref.

DF

DF

2100h

-

-

-

Session 1

Session 3

-

-

-

T2 Environment

Linear

2111h

14h

1

32

Always

Session 1

Never

-

2111h

T2 Contracts

Linear

2112h

15h

16

64

Always

Session 2

Session 3

2112h

T2 Usage

Linear

2113h

1Ah

16

48

Always

Always

Never

-

2113h

T2 Counters A

Counters

2114h

1Bh

1

48

Always

Session 2

Always

Session 2

2114h

T2 Counters B

Counters

2115h

1Ch

1

48

Always

Session 2

Session 3

Session 2

2115h

T2 Names

Linear

2116h

18h

16

64

Always

Session 3

Never

-

2116h

T2 Picture Data

Binary

2117h

12h

4096

Always

Session 2

Never

-

2117h

T2 Picture Attributes

Linear

2118h

13h

1

64

Always

Session 2

Never

-

2118h

Data sharing:

The two bytes data references for sharing are provided as example (different EF sharing the same memory must have identical DataRef values). The application 3 has external EF sharing: the application 3 grants limited access of its files to the application 4.

The Hoplink application could share its EF to other ticketing application with restricted access: the access indicated in red are defined differently in the other ticketing application.

Initial data:

File

Rec. Num

Size

Pre-personalized data

T2 Contracts (2112h / 15h) (the eleventh byte at FFh)

1

64

00000000000000000000FF0000000000 00000000000000000000000000000000 00000000000000000000000000000000 00000000000000000000000000000000h

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

Calypso Prime PKI Profile - Application 3

'Alternative configuration' (limited memory)

Type:

Calypso Interoperable Application

AID:

A000000291 A00000 01 9102h

Startup:

Session Modifications:

highest Calypso referenced value supported by the product

Application Type:

coding {PKI mode not supported} / {Extended mode supported} / {without Calypso stored value} / {with Calypso PIN} / {ratification mode: as supported by the product}

Application SubType:

0Ch

referenced Calypso file structure '0Ch': Hoplink configuration '0Ch' without picture files

AES Calypso keyset:

KIF

KVC

ALG

diversified from

issued from the 'Calypso SAM-TEST-F5v8'

#1 Issuer

21h

09h

A0h

MK_RT1_A3

#2 Load

27h

09h

A0h

MK_RT2_A3

shared Calypso  PIN:

30303030h

"0000"

#3 Debit

30h

09h

A0h

MK_RT3_A3

File structure:

Group 0

Group 1

Group 2

Group 3

EF Sharing

File

Type

LID

SFI

Rec. Num.

Rec. Size

Read Rehabilitate

Update Invalidate

Write Decrease

Append Increase

Data Ref.

DF

DF

2100h

-

-

-

Session 1

Session 3

-

-

-

T2 Environment

Linear

2111h

14h

1

32

Always

Session 1

Never

-

2111h

T2 Contracts

Linear

2112h

15h

8

64

Always

Session 2

Session 3

2112h

T2 Usage

Linear

2113h

1Ah

8

48

Always

Always

Never

-

2113h

T2 Counters A

Counters

2114h

1Bh

1

24

Always

Session 2

Always

Session 2

2114h

T2 Counters B

Counters

2115h

1Ch

1

24

Always

Session 2

Session 3

Session 2

2115h

T2 Names

Linear

2116h

18h

8

64

Always

Session 3

Never

-

2116h

Data sharing:

The two bytes data references for sharing are provided as example (different EF sharing the same memory must have identical DataRef values). The application 3 has external EF sharing: the application 3 grants limited access of its files to the application 4.

The Hoplink application could share its EF to other ticketing application with restricted access: the access indicated in red are defined differently in the other ticketing application.

Initial data:

File

Rec. Num

Size

Pre-personalized data

T2 Contracts (2112h / 15h) (the eleventh byte at FFh)

1

64

00000000000000000000FF0000000000 00000000000000000000000000000000 00000000000000000000000000000000 00000000000000000000000000000000h

2

3

4

5

6

7

8

Calypso Prime PKI Profile - Application 4

Type:

Calypso Transport

AID:

A000000291 FF 9111h

Based on file structure '13h' (intercode 2.2) with additional ID2, ID3, Secured Counters & Secured Events files, with Extended mode specific access rights

Startup:

Session Modifications:

highest Calypso referenced value supported by the product

Application Type:

coding {PKI mode supported} / {Extended mode supported} / {with Calypso stored value} / {with Calypso PIN} / {ratification mode: as supported by the product}

Application SubType:

F3h

proprietary file structure 'F3h': intercode 2.2

with shared Hoplink files

with additional ID2, ID3, Secured Counters & Secured Events files

AES Calypso keyset:

KIF

KVC

ALG

diversified from

issued from the 'Calypso SAM-TEST-F5v8'

#1 Issuer

21h

75h

B0h

MK_RT1_B1

#2 Load

27h

75h

B0h

MK_RT2_B1

shared Calypso  PIN:

30303030h

"0000"

#3 Debit

30h

75h

B0h

MK_RT3_B1

PKI settings:

PO Key Pair (ECC)

not initialized

CACert

not initialized

POCert

not initialized

File structure:

Group 0

Group 1

Group 2

Group 3

EF Sharing

File

Type

LID

SFI

Rec. Num.

Rec. Size

Read Rehabilitate

Update Invalidate

Write Decrease

Append Increase

Data Ref.

DF

DF

2200h

-

-

-

Session 1

Session 3

-

-

-

Environment & Holder

Linear

2201h

01h

1

80

Always

Session 1

Never

-

-

Identification (ID)

Linear

2202h

02h

1

48

PIN

Session 2

Never

-

-

Contracts

Linear

2203h

03h

8

64

Always

Session 2

Session 3

-

-

Profiles

Linear

2204h

04h

8

56

Always

Session 2

Session 3

-

-

Counters

Counters

2205h

05h

1

48

Always

Session 2

Session 3

Session 2

-

Free Counters

Counters

2206h

06h

1

24

Always

Session 2

Always

Session 2

-

Lists

Linear

2207h

07h

1

80

Always

Session 3

Never

-

-

Global Events

Linear

2208h

08h

3

48

Always

Session 3

Never

-

-

Contract Events

Linear

2209h

09h

3

48

Always

Session 3

Never

-

-

Cyclic Events

Cyclic

220Ah

0Ah

3

48

Always

Session 3

Session 3

Session 3

-

Free Data

Linear

220Bh

0Bh

1

64

Always

Always

Always

-

-

Identification (ID2)

Linear

220Ch

0Ch

1

48

confidential 3

confidential 1

Never

-

-

Identification (ID3)

Linear

220Dh

0Dh

1

48

PIN & confidential 3

confidential 2

Never

-

-

Secured Counters

Counters

220Eh

0Eh

1

24

confidential 3

confidential 2

confidential 3

confidential 2

-

Secured Events

Cyclic

220Fh

0Fh

3

48

confidential 3

confidential 3

confidential 3

confidential 3

-

T2 Environment

Linear

2211h

14h

1

32

Always

Never

Never

-

2111h

T2 Contracts

Linear

2212h

15h

16

64

Always

Never

Session 3

2112h

T2 Usage

Linear

2213h

1Ah

16

48

Always

Always

Never

-

2113h

T2 Counters A

Counters

2214h

1Bh

1

48

Always

Never

Always

Never

2114h

T2 Counters B

Counters

2215h

1Ch

1

48

Always

Never

Session 3

Never

2115h

T2 Names

Linear

2216h

18h

16

64

Always

Session 3

Never

-

2116h

T2 Picture Data

Binary

2217h

12h

4096

Always

Never

Never

-

2117h

T2 Picture Attributes

Linear

2218h

13h

1

64

Always

Never

Never

-

2118h

Data sharing:

The two bytes data references for sharing are provided as example (different EF sharing the same memory must have identical DataRef values). The application 4 has external EF sharing: the application 4 has limited access on the files of the application 3.

The ticketing application has a restricted access on the files of the Hoplink application: the access indicated in red are defined differently in the Hoplink application.

Calypso Prime PKI Profile - Application 5

Type:

NDEF application on Calypso

AID:

D2760000850101h

Startup:

Session Modifications:

highest Calypso referenced value supported by the product

Application Type:

coding {PKI mode supported} / {Extended mode supported} / {without Calypso stored value} / {with Calypso PIN} / {ratification mode: as supported by the product}

Application SubType:

F4h

proprietary file structure 'F4h': NFC NDEF Tag Type 4

issued from the 'Calypso SAM-TEST-F5v8'

AES Calypso keyset:

KIF

KVC

ALG

diversified from

#1 Issuer

21h

75h

B0h

MK_RT1_B1

#2 Load

27h

75h

B0h

MK_RT2_B1

shared Calypso  PIN:

30303030h

"0000"

#3 Debit

30h

75h

B0h

MK_RT3_B1

PKI settings:

PO Key Pair (ECC)

not initialized

CACert

not initialized

POCert

not initialized

File structure:

Group 0

Group 1

Group 2

Group 3

EF Sharing

File

Type

LID

SFI

Rec. Num.

Rec. Size

Read Rehabilitate

Update Invalidate

Write Decrease

Append Increase

Data Ref.

DF

DF

E100h

-

-

-

Session 1

Session 3

-

-

-

Capability File

Binary

E103h

01h

15

Always

Session 1

Never

-

-

NDEF Data File

Binary

E104h

02h

2048*

Always

Always

Always

-

-

* (The size of the EF 'NDEF Data File' is a multiple of 128)