Council Regulation (EEC) No 3821/85Show full title

[F1 [F2 1. GENERALITIES U.K.

This appendix specifies the security mechanisms ensuring:

• the mutual authentication between VUs and tachograph cards, including session key agreement,

• the confidentiality, integrity and authentication of data transferred between VUs and tachograph cards,

• the integrity and authentication of data downloaded from VUs to external storage media,

• the integrity and authentication of data downloaded from tachograph cards to external storage media.

1.1. References U.K.

The following references are used in this Appendix:

SHA-1

National Institute of Standards and Technology (NIST). FIPS Publication 180-1: Secure Hash Standard. April 1995

PKCS1

RSA Laboratories. PKCS # 1: RSA Encryption Standard. Version 2.0. October 1998

TDES

National Institute of Standards and Technology (NIST). FIPS Publication 46-3: Data Encryption Standard. Draft 1999

TDES-OP

ANSI X9.52, Triple Data Encryption Algorithm Modes of Operation. 1998

ISO/IEC 7816-4

Information Technology — Identification cards — Integrated circuit(s) cards with contacts — Part 4: Interindustry commands for interexchange. First edition: 1995 + Amendment 1: 1997

ISO/IEC 7816-6

Information Technology — Identification cards — Integrated circuit(s) cards with contacts — Part 6: Interindustry data elements. First edition: 1996 + Cor 1: 1998

ISO/IEC 7816-8

Information Technology — Identification cards — Integrated circuit(s) cards with contacts — Part 8: Security related interindustry commands. First edition 1999

ISO/IEC 9796-2

Information Technology — Security techniques — Digital signature schemes giving message recovery — Part 2: Mechanisms using a hash function. First edition: 1997

ISO/IEC 9798-3

Information Technology — Security techniques — Entity authentication mechanisms — Part 3: Entity authentication using a public key algorithm. Second edition 1998

ISO 16844-3

Road vehicles — Tachograph systems — Part 3: Motion sensor interface.

1.2. Notations and abbreviated terms U.K.

The following notations and abbreviated terms are used in this Appendix:

(K _a , K _b , K _c )

a key bundle for use by the triple data encryption algorithm

CA

Certification authority

CAR

Certification authority reference

CC

Cryptographic checksum

CG

Cryptogram

CH

Command header

CHA

Certificate holder authorisation

CHR

Certificate holder reference

D()

Decryption with DES

DE

Data element

DO

Data object

d

RSA private key, private exponent

e

RSA public key, public exponent

E()

Encryption with DES

EQT

Equipment

Hash()

hash value, an output of hash

Hash

hash function

KID

Key identifier

Km

TDES key. Master Key defined in ISO 16844-3

Km _vu

TDES key inserted in vehicle units

Km _wc

TDES key inserted in workshop cards

m

message representative an integer between 0 and n -1

n

RSA keys, modulus

PB

Padding bytes

PI

Padding indicator byte (for use in cryptogram for confidentiality DO)

PV

Plain value

s

signature representative, an integer between 0 and n -1

SSC

Send sequence counter

SM

Secure messaging

TCBC

TDEA cipher block chaining mode of operation

TDEA

Triple data encryption algorithm

TLV

Tag length value

VU

Vehicle unit

X.C

the certificate of user X issued by a certification authority

X.CA

a certification authority of user X

X.CA.PK _o X.C

the operation of unwrapping a certificate to extract a public key. It is an infix operator, whose left operand is the public key of a certification authority, and whose right operand is the certificate issued by that certification authority. The outcome is the public key of the user X whose certificate is the right operand,

X.PK

public key of a user X

X.PK[I]

RSA encipherment of some information I, using the public key of user X

X.SK

RSA private key of a user X

X.SK[I]

RSA encipherment of some information I, using the private key of user X

′xx′

a Hexadecimal value

||

concatenation operator.] ]

Textual Amendments

F1 Inserted by Council Regulation (EC) No 2135/98 of 24 September 1998 amending Regulation (EEC) No 3821/85 on recording equipment in road transport and Directive 88/599/EEC concerning the application of Regulations (EEC) No 3820/85 and (EEC) No 3821/85.

F2 Substituted by Commission Regulation (EC) No 1360/2002 of 13 June 2002 adapting for the seventh time to technical progress Council Regulation (EEC) No 3821/85 on recording equipment in road transport (Text with EEA relevance).