Page Comparison

RSA Key ID length

2

Length of the key ID (MSB)

RSA Key ID

var

RSA key ID used for the session key encryption

Encrypted KEK length

2

Length of the encrypted KEK (MSB - should be 512)

Encrypted KEK

512

Encrypted KEK block:

• encrypted with RSA key (RSA/ECB/OAEPWithSHA-256AndMGF1Padding)

• cleartext contains the KEK (16 bytes) and the IV (16 bytes)

Encrypted pseudo PIN block length

2

Length of the encrypted PIN block (MSB - should be 16)

Encrypted pseudo PIN block

16

Encrypted pseudo PIN block:

• encrypted with KEK key (AES/CBCECB/NoPadding)

• cleartext contains the pseudo PIN block (see below)

HMAC Key ID length

2

Length of the HMAC key ID (MSB)

HMAC Key ID

var

HMAC key ID used for the checksum calculation

HMAC length

2

Length of the HMAC checksum (MSB - should be 32)

HMAC

32

AES-CBC-256 checksum