In cryptography, a Secure Channel Protocol (SCP) is a way of transferring data that is resistant to overhearing and tampering. A confidential channel is a way of transferring data that is resistant to overhearing (i.e., reading the content), but not necessarily resistant to tampering. An authentic channel is a way of transferring data that is resistant to tampering but not necessarily resistant to overhearing.

SCP02 has been deprecated by GlobalPlatform. GlobalPlatform recommends that Card Content Management operations and applications relying on SCP02 confidentiality protection of static data shall adopt one of the possible mitigations:

  • Encrypt all sensitive data transmitted in SCP02 using the Data Encryption Key (DEK) or any applet key.
  • Disable SCP02.
  • Transition to SCP03.

Commonly used Secure Channel Protocols are SCP01, SCP02, SCP03, SCP80 and SCP81. Protocols SCP01, SCP02 and SCP03 that are meant for data security, SCP80 and SCP81 are for transport security.

Secure Channel Protocol SCP01, SCP02, SCP03

Related Products

Related Articles

« Back to Glossary Index