ISO/IEC 7816-6:2023/Amd 1:2026

Overview

ISO/IEC 7816-6:2023/FDAmd 1 is the latest amendment to the well-established international standard ISO/IEC 7816-6, which specifies interindustry data elements for interchange related to identification cards with integrated circuits. This amendment introduces data elements for quantum safe cryptography (QSC), addressing the evolving security needs in the era of quantum computing. Published by ISO and IEC under the Joint Technical Committee ISO/IEC JTC 1/SC 17, it ensures inclusive global standardization for smart card technology that is future-proof against quantum threats.

This updated specification formally incorporates cryptographic data elements designed to withstand both classical and quantum computer-based attacks, enabling secure interchange of integrated circuit cards in various industries.

Key Topics

• Quantum Safe Cryptography (QSC):
  Defined as cryptographic systems that resist attacks from both quantum and classical computers, QSC represents the next generation of secure cryptographic algorithms essential for protecting sensitive data in integrated circuit cards.

• New Data Elements for QSC:
  The amendment introduces five new template tags for encoding QSC-related data elements, including:

  • QSC public or private key templates and their related key components
  • Templates for common cryptographic parameters governing QSC algorithms
  • Configurations for QSC hybrid signatures
  • Parameterized templates for key encapsulation mechanisms (KEM) used in QSC

• BER-TLV Extensions:
  The amendment adds support for the QSC templates within the existing Basic Encoding Rules - Tag Length Value (BER-TLV) framework, enhancing compatibility and interoperability with current smart card data interchange formats.

• Cross-References to ISO/IEC 7816-8:
  The data elements introduced rely on definitions from ISO/IEC 7816-8 for QSC key and parameter structures, ensuring consistency across parts of the ISO/IEC 7816 series related to cryptographic mechanisms.

Applications

• Smart Cards for Personal Identification:
  Governments, financial institutions, and healthcare providers can implement quantum safe cryptographic data elements in integrated circuit cards to protect personal identity data against emerging quantum attacks.

• Secure Payment Systems:
  Banking and payment card industries can adopt these data elements to future-proof their cryptographic operations embedded in credit and debit cards, enhancing transaction security.

• Access Control and Authentication:
  Organizations deploying integrated circuit cards for secure access and multi-factor authentication can leverage QSC data elements to safeguard credentials from quantum-enabled cyber threats.

• Interindustry Interoperability:
  This amendment standardizes the representation of quantum safe cryptographic data elements to ensure seamless interoperability across industries using integrated circuit cards for secure data interchange.

Related Standards

• ISO/IEC 7816 Series:
  This amendment is part of the extensive ISO/IEC 7816 standard series governing integrated circuit cards, particularly related to data elements (Part 6) and cryptographic mechanisms (Part 8).

• ISO/IEC 7816-8:2021 (Amendment 1:2023):
  Provides definitions for QSC keys, parameter templates, and cryptographic algorithm configurations referenced in this amendment.

• ISO/IEC Directives, Part 1 and Part 2:
  Detail the editorial and procedural rules followed in preparing and maintaining this standard.

• ISO Patent Policy:
  Users should be aware of potential patent claims related to quantum safe cryptographic implementations as indicated by ISO and IEC.

By integrating quantum safe cryptography data elements into the universally adopted ISO/IEC 7816-6 standard, this amendment equips the smart card ecosystem with robust defenses against future cryptographic threats–ensuring trust, security, and compliance for identification and secure transaction technologies worldwide.