GlobalPlatform Integrates Advanced Cryptography
2 March 2012 – GlobalPlatform has released a security upgrade for managing the content of applications on secure chip technology compliant to GlobalPlatform Card Specification v2.2. The technical document, which is free to download from GlobalPlatform's website, references new cryptographic schemes based on Elliptic Curve Cryptography (ECC) and up-to-date RSA algorithms and keys.
GlobalPlatform, the organization which standardizes the management of applications on secure chip technology, has released Amendment E to Card Specification v2.2 to meet the long-term requirement for stronger cryptographic technology from key players in the smart card community. The need to migrate is being driven by government mandates for ECC or extended length RSA keys to support digital signatures, as well as service providers in the mobile contactless market who want to confidentially load applications and manage keys in secure elements.
The document, which will be of particular interest to card manufacturers and application developers, details the use of ECC and new schemes for RSA with respect to signing, encryption and padding operations. Additionally, a new scenario for confidential key generation based on ECC technology is now available which meets the requirements of implementation models for secure applications involving service providers, issuers and third parties, such as a trusted service manager.
Amendment E was produced by the GlobalPlatform Card Committee. Its Chair, Karl-Eglof Hartel, Manager for Standards and Innovation in the secure devices division at Giesecke & Devrient, comments: "The security in GlobalPlatform's Card Specification is based on several cryptographic primitives. The purpose of this recent work has been to expand those specifications to include the latest cryptographic schemes. As we place an increasing amount of data on secure chips to enable applications such as e-identity or payment, the ability to effectively protect sensitive data to the highest standard will be paramount. GlobalPlatform recognized this need and has released Amendment E in direct response to the long-term requirements of the industry."
