SCP03 is a Asymmetric Secure Channel Protocol that relies on the Encrypt-then-MAC method. Secure Channel Protocol is a way of transferring data that is resistant to overhearing and tampering. A confidential channel is a way of transferring data that is resistant to overhearing (i.e., reading the content), but not necessarily resistant to tampering. An authentic channel is a way of transferring data that is resistant to tampering but not necessarily resistant to overhearing. SCP03 uses the generic composition Encrypt-then-MAC, therefor it is both IND-CPA and INT-CTXT secure.
SCP03 protects against the following attacks:
- Replay
- Out-of-order
- Mass Surveillance via algorithm-substitution
Related Articles
Eurosmart Welcomes GlobalPlatform’s Decision to set SCP02 as a Deprecated Feature
In early April 2018, GlobalPlatform announced in a Security Informative Note that the latest version of the Card Specification (v2.3.1) will set SCP02 as a deprecated feature. Eurosmart is committed in developing, promoting and maintaining the appropriate security level for its products,
Versasec, a Leader in Smart Card Management Systems Unveils Latest Version of vSEC:CMS S-Series
New York, NY, August 04, 2017 -- Versasec, the leader in smart card management systems, today introduced version 4.9 of its vSEC:CMS S-Series identity and access management solution. This updated version of the company's flagship product includes a variety