http://www.legislation.gov.uk/id/eur/2016/799/annex/1/appendix/11/division/1/part/A/division/3/division/3.1/division/3.1.4

ANNEX I CRequirements for construction, testing, installation, and inspection

Appendix 11

COMMON SECURITY MECHANISMS

PART AFIRST-GENERATION TACHOGRAPH SYSTEM

3.KEYS AND CERTIFICATES

3.1.Keys generation and distribution

3.1.4T-DES session keys generation and distribution

CSM_012

Vehicle units and tachograph cards shall, as a part of the mutual authentication process, generate and exchange necessary data to elaborate a common Triple DES session key. This exchange of data shall be protected for confidentiality through an RSA crypt-mechanism.