ISO/IEC 13157-3:2016 PDF

Name: ISO/IEC 13157-3:2016 — Information technology — Telecommunications and information exchange between systems — NFC Security — Part 3: NFC-SEC cryptography standard using ECDH-256 and AES-GCM
SKU: ISO/IEC 13157-3:2016
Price: 25 EUR
Availability: InStock

Information technology — Telecommunications and information exchange between systems — NFC Security — Part 3: NFC-SEC cryptography standard using ECDH-256 and AES-GCM

Название (английский):

ISO/IEC 13157-3:2016

Information technology — Telecommunications and information exchange between systems — NFC Security — Part 3: NFC-SEC cryptography standard using ECDH-256 and AES-GCM

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 8
Дата публикации:: 29 марта 2016 г.
Издание:: ISO/IEC IS 13157 edition 1 version 1
ICS:: 35.110

Тип поставки:

Full version120 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:2 раб. дн. (перевод)

Цена:120 €

Описание (английский):

ISO/IEC 13157-3:2016 specifies the message contents and the cryptographic methods for PID 02. It specifies cryptographic mechanisms that use the Elliptic Curves Diffie-Hellman (ECDH) protocol with a key length of 256 bits for key agreement and the AES algorithm in GCM mode to provide data authenticated encryption.

Abstract

Похожие стандарты

Стандарты, упомянутые в описании

Overview

ISO/IEC 13157-3:2016 specifies the NFC‑SEC cryptography mechanisms for Protocol Identifier PID = 02, defining message contents and cryptographic methods for secure NFC peer-to-peer communication. The standard mandates use of Elliptic Curve Diffie‑Hellman (ECDH) with curve P‑256 (ECDH‑256) for key agreement and AES in Galois/Counter Mode (AES‑GCM) for authenticated encryption. It is part of the NFC Security series and complements ISO/IEC 13157‑1 (protocol) and ISO/IEC 13157‑2 (other cryptography variants).

Key topics and technical requirements

Key agreement: ECDH using curve P‑256 (per FIPS 186‑4) to derive a shared secret.

Authenticated encryption: AES‑128‑GCM for data confidentiality and integrity (t = 96-bit tag).

Key derivation: Two KDFs for Secure Simple Exchange (SSE) and Secure Channel (SCH) based on AES‑CMAC PRF‑128 (AES‑CMAC used as PRF).

Key confirmation: Entities exchange AES‑CMAC‑96 tags to confirm both have derived the same keys (per ISO/IEC 11770‑3).

Nonces: Each peer sends fresh random nonces with at least 128 bits of entropy; nonces must be uncorrelated across transactions (ISO/IEC 18031 referenced).

StartVar (IV derivation): StartVar is generated from nonces using AES‑CMAC per ISO/IEC 19772 and correlated corrigenda to ensure distinct IVs per message.

Key usage separation: Derived keys MK, K and MK (SSE/SCH) have specific, limited purposes (master keys, authenticated encryption keys); keys must be unique per transaction.

Protocol details: Covers primitives, message sequence integrity (SN), data conversions, and SCH/SSE invocation and data exchange for PID 02.

Practical applications

ISO/IEC 13157‑3:2016 is intended for implementing secure NFC interactions where devices do not share pre-established secrets. Typical use cases:

Mobile payments and wallet-to-wallet transactions

Secure pairing and data exchange between phones, wearables, and readers

Ticketing, transit passes, and access control where short-range authenticated channels are required

Point‑to‑point NFC file transfer with confidentiality and integrity guarantees

Related standards

ISO/IEC 13157‑1 (NFC‑SEC protocol)

ISO/IEC 13157‑2 (other NFC‑SEC cryptography)

ISO/IEC 19772 (authenticated encryption / GCM guidance)

ISO/IEC 9797‑1 (MAC / CMAC)

ISO/IEC 18031 (random bit generation)

FIPS 186‑4 (curve P‑256 parameters)

Keywords: ISO/IEC 13157‑3:2016, NFC security, NFC‑SEC, ECDH‑256, AES‑GCM, AES‑CMAC, key derivation, authenticated encryption, secure NFC channel.

ISO/IEC 13157-3:2016 PDF

Abstract

Похожие стандарты

Overview

Key topics and technical requirements

Practical applications

Who should use this standard

Related standards

Технические детали

ISO/IEC 13157-1:2010

Information technology — Telecommunications and information exchange between systems — NFC Security — Part 1:…

ISO/IEC 13157-2:2010

Information technology — Telecommunications and information exchange between systems — NFC Security — — Part…

ISO/IEC 11770-3:2021

Information security — Key management — Part 3: Mechanisms using asymmetric techniques

ISO/IEC 18031:2011/Amd 1:2017

Information technology — Security techniques — Random bit generation — Amendment 1: Deterministic random bit…

BS ISO/IEC 19772:2020

Information security. Authenticated encryption.

ISO/IEC 9797-1:2011/Amd 1:2023

Information technology — Security techniques — Message Authentication Codes (MACs) — Part 1: Mechanisms using…