Ctrlk
For the complete documentation index, see llms.txt. This page is also available as Markdown.
Export as PDF

Encrypt User Data - Command 0xEF09

The host uses this command to request that the device encrypt a block of user data embedded in the command string. The SRED ID 2 Key will be used for encryption. The TLVs of KSN and Encryption Type will be provided at the end of the string for decryption.

1

Host request and device processing

The sequence of events is as follows:

  • The host composes a command request in the format below and sends it to the device.

  • The device will fetch the Real-Time Clock Date/Timestamp, retrieve the device's Serial Number, extract the data within 0xA3 TLV in the command string. And then concatenate all the collected TLVs as follows: + + <User Data TLV(s)>. The format of the encrypted data string is shown in the Response Data below.

  • If the command is invalid or encryption fails, then a response of failure will be sent to the host.

Request Data for Command 0xEF09 - Encrypt User Data

Tag
Len
Value / Description
Typ
Req
Default

Beginning of any wrappers, at minimum including Request Message

EF09 = Encrypt User Data - Command 0xEF09

A3

var

User data parameters for item #0 to item #3. The maximum total size of 0xA3 TLV is 4,000 bytes.

B

R

/81

var

User data item #0, required, minimum 1 byte.

B

R

/82

var

User data item #1, optional

B

O

/83

var

User data item #2, optional

B

O

/84

var

User data Item #3, optional

B

O

End of any wrappers, at minimum including Request Message

Response Data for Command 0xEF09 – Encrypt User Data

Tag
Len
Value / Description
Typ
Req
Default

Beginning of any wrappers, at minimum including Response Message

EF09 = Encrypt User Data - Command 0xEF09

F8

var

Container for Encrypted Data

T

R

/DFDF59

var

Encrypted Data Primitive ( length includes padding) Decrypt the value of this TLV data object using the algorithm and variant specified in the Encrypted Data KSN parameter and the Encryption Type parameter below to read its contents.

B

R

/DFDF56

var

Encrypted Data KSN

B

R

/DFDF57

01

Encrypted Data Encryption Type See Encryption Type for a list of valid values.

B

R

End of any wrappers, at minimum including Response Message

Response Data for Encrypt User Data (after decryption) - Command 0xEF09

Tag
Len
Value / Description
Typ
Req
Default

Beginning of any wrappers, at minimum including Response Message

EF09 = Encrypt User Data - Command 0xEF09

F8

var

Container for Encrypted Data

T

R

/DFDF59

var

Encrypted Data Primitive, length includes padding

T

R

//FC

var

Decrypted Data Container, length excludes padding

T

R

///81

04

Real Time Clock, Epoch Time in seconds, unsigned 32 bits. The date and time shall be Universal Time Coordinated (UTC).

B

R

///82

04

Device Serial Number

B

R

///A3

var

User data parameters for item #0 to item #3. The maximum total size of 0xA3 TLV is 4,000 bytes.

B

R

////81

var

User data item #0, required, minimum 1 byte

B

R

////82

var

User data item #1, optional

B

O

////83

var

User data item #2, optional

B

O

////84

var

User data item #3, optional

B

O

PKCS7 padding, maximum 16 bytes, minimum 1 byte

/DFDF56

var

Encrypted Data KSN

B

R

/DFDF57

01

Encrypted Data Encryption Type See section 4.4 Encryption Type for a list of valid values.

B

R

End of any wrappers, at minimum including Response Message

Request Example - Command 0xEF09

Response Example - Command 0xEF09

Last updated