PrefaceStandards development within the Information Technology sector is harmonized with international standards development. Through the CSA Technical Committee on Information Technology (TCIT), Canadians serve as the Canadian Advisory Committee (CAC) on ISO/IEC Joint Technical Committee 1 on Information Technology (ISO/IEC JTC1) for the Standards Council of Canada (SCC), the ISO member body for Canada and sponsor of the Canadian National Committee of the IEC. Also, as a member of the International Telecommunication Union (ITU), Canada participates in the International Telegraph and Telephone Consultative Committee (ITU-T).
At the time of publication, ISO/IEC 7816-15:2004 is available from ISO and IEC in English only. CSA will publish the French version when it becomes available from ISO and IEC.
ScopeThis part of ISO/IEC 7816 specifies an application in a card.
This application contains information on cryptographic functionality.
This part of ISO/IEC 7816 defines a common syntax and format for the cryptographic information and mechanisms to share this information whenever appropriate.
The objectives of this part of ISO/IEC 7816 are to:
- facilitate interoperability among components running on various platforms (platform neutral);
- enable applications in the outside world to take advantage of products and components from multiple manufacturers (vendor neutral);
- enable the use of advances in technology without rewriting application-level software (application neutral); and
- maintain consistency with existing, related standards while expanding upon them only where necessary and practical.
It supports the following capabilities:
- storage of multiple instances of cryptographic information in a card;
- use of the cryptographic information;
- retrieval of the cryptographic information, a key factor for this is the notion of Directory Files, which provides a layer of indirection between objects on the card and the actual format of these objects;
- cross-referencing of the cryptographic information with DOs defined in other parts of ISO/IEC 7816 when appropriate;
- different authentication mechanisms; and
- multiple cryptographic algorithms (the suitability of these is outside the scope of this part of ISO/IEC 7816).
This part of ISO/IEC 7816 does not cover the internal implementation within the card and/or the outside world. It shall not be mandatory for implementations complying with this International Standard to support all options described.
In case of discrepancies between ASN.1 definitions in the body of the text and the module in Annex A, Annex A takes precedence.
