This document defines an extension to the GlobalPlatform Card Specification that specifies the Cryptographic Service Provider (CSP).The CSP provides an API for high-level cryptographic building blocks, such as authentication protocols and secure data management. Its purpose is to support Application developers by providing high-level cryptography and reducing dependencies on platform-specific security guidance.
Further, the CSP API serves as a cryptographic abstraction layer that aims to simplify security evaluations by separating cryptographic functionality from the application logic. Applications that use a CSP for their cryptographic and security-related operations can benefit from the CSP’s evaluated and approved security functions, reducing the evaluation effort for the Application itself.
