eSIM RSP 测试用例对比站

人工切片(-man) ↔ Cas 盲生成(-cas)· 真机真卡执行证据对照

4.2.18.2.8 ES10b 服务器认证(SM-DS)异常用例

TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases

章节:4.2.18 · ES10b (LPA -- eUICC): AuthenticateServer配对状态:PAIRED报告生成:2026-10-08 22:57:10数据包生成:2026-10-08 22:57:09
-man 人工切片
终态
ok `_ok` 复用(结构 A1-A7 PASS;`_ok` run 无厂商错误行)
ErrorCount
0
执行 job
20260908_222123:fef7b21c90fd423882bea9624d202e5d
html_run
20261007_124814
包 sha256
42b7ec7b954d7889…
包大小
243.2 KB
日志源:logs/20261007_124814/extracted/ESIM_TEST_SGP_23/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_Error_With_Incorrect_SM_DSauth_certificate.html
-cas 盲生成
终态
failed 纯 native 零卡态前置(N0)
ErrorCount
37
执行 job
30b510826dba481386c9343432026699
html_run
2c6df79cf2d6_att1
包 sha256
15a864dc1ca162c6…
包大小
841.8 KB
判定
RERUN
路由
native_N0
状态轴
execution=red_verify / place=not_attempted / release=not_ready / card_state=n/a

差异概览(机械口径)

闭包文件层(l1)
man 34 / cas 82 个 JS;共同 31,一致 30,man-only 3,cas-only 51
命令序列层(l2)
man 40 / cas 57 条命令;完全一致 5,核心一致 8,长度尾部差 3,man-only 27,cas-only 44
规范覆盖(l3)
spec_steps 0,缺失 REQ 9 项,checkData 116 次,计数缺口 0,物化 FULL,执行 FAIL
断言自证(attestation)
js 断言 48 条 / 绑定层 0 条 / 缺口 0
机械差异分类
轴说明计数
RUN_DIFFman 通过 / cas 失败1
SCRIPT_DIALECT闭包文件差:man-only 3 / cas-only 51;命令序列差:man-only 27 / cas-only 44125
GEN_DIFFREQ 覆盖缺口:['RQ26_005/006/007/008/010/012/013/029/033/034/035', 'RQ31_025/046-055/076-079', 'RQ36_017', 'RQ42_001', 'RQ43_001/002', 'RQ45_002/006/026/026_1/028/030/032', 'RQ55_004/005', 'RQ57_093-108)', '§4.2.18.1 全集']9

对比报告

4.2.18.2.8 TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases — -man ↔ -cas diff 报告

交付形态说明:本报告随专家交付包分发——-man/-cas 脚本包 zip 与 190server HTML 执行日志已内联至 packages/、evidence-html/,相应路径已相对化;TTR、spec_intl、caseir 等仓内留痕仍为生成机原始路径(未随包)。
  • 生成时间:2026-10-08 22:57:10 |引擎:holiday-blk5/0.1|配对状态:PAIRED
  • 分母口径:卡侧 61 之一

1. 配对与包

侧包/源sha256源类型入口用例
-man4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-man.zip42b7ec7b954d7889976a04c76c478f74baf73514780c4d095aa2c6a7c0beec6fzipTC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_Error_With_Incorrect_SM_DSauth_certificate
-cas4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-cas.zip15a864dc1ca162c6540499972f3a546bce85a389620611ec2a1fb774d5180a79zip—
  • man 源路径:../packages/man/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-man.zip
  • cas 源路径:../packages/cas/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-cas.zip
  • 上游来源:{"man_ledger": true, "cas_ledger": true, "naming_map": true, "html_probe": true, "man_package": true, "cas_package": true}
  • 适用性:naming-map=M ["M", "M", "M", "M", "M"];caseir=M

2. 执行摘要(双方 job/终态)

侧终态/计划备注ErrorCountjob_id业务状态TTR诊断包
-manok_ok 复用(结构 A1-A7 PASS;_ok run 无厂商错误行)020260908_222123:fef7b21c90fd423882bea9624d202e5d—/Users/yuhu/cas/原料/切片/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases/logs/20260908_222939_ok/result/ESIM_TEST_SGP_23/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_Error_With_Incorrect_SM_DSauth_certificate.ttr—
-casfailed纯 native 零卡态前置(N0)3730b510826dba481386c9343432026699—/Users/yuhu/cas/experiments/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-20261004_021953/logs/30b510826dba481386c9343432026699/result/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_06_merged.ttr—
  • cas 块4账本:decision=RERUN;route=native_N0;live 事件 1 条(4.6 波次进行中;以块4终版账本为准)
  • cas 4.6 波次最新执行:terminal=failed;stage=verify;job=30b510826dba481386c9343432026699;gaps=["trace verdict=FAIL", "S20-SW: 期望 SW=9000,实际值 'dt20_not_executed:no_usable_material_set'(行 198)不符——证据矛盾", "结果通道 verdict='FAIL'"]
  • cas 失败归因引用(块4):b5-attribution.md
  • cas 证据来源分层:RERUN → 本轮 4.6 波次执行

3. HTML 执行日志状态

  • -man:NATIVE(../evidence/4.2.18.2.8/man/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_Error_With_Incorrect_SM_DSauth_certificate.html;sha256 490e6746ff75542e309146c8f9fad572f807f1cbca08406898636158ab17317d;85974 bytes)
  • -cas:NATIVE(../evidence/4.2.18.2.8/cas/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_06_merged.html;sha256 79549dde78a12e7123c995e830747f477701d2b517add148feb2b9284f7c8d94;45998 bytes)
  • 纪律:原生缺失 → HTML_UNAVAILABLE 显式阻断(附探针结论);派生件仅标 DERIVED_NOT_NATIVE,不冒充原生。

4. L1 脚本/依赖/命名差异(源文件闭包级)

  • 闭包规模:man 34 文件 / cas 82 文件;同名 31(字节同 30,内容异 1)
  • 同名内容异:Import/TestCase_SGP_23.js
  • man-only 文件 3:ESIM_TEST_SGP_23.UCE, ESIM_TEST_SGP_23.sol, MANIFEST.json
  • cas-only 文件 51:Import/CapInfo.js, Import/ExecuteTestCase.js, Import/ExecuteTestCase_CSC.js, Import/ExecuteTestCase_LoadProfile_via_bip.js, Import/ExecuteTestCase_Local_Management.js, Import/ExecuteTestCase_Non_Telecom_Profile.js, Import/ExecuteTestCase_Performance.js, Import/ExecuteTestCase_PressureTest.js, Import/ExecuteTestCase_ProfileFormatTest_V_2_3_1.js, Import/ExecuteTestCase_ProfileServicesListTest.js …
  • 注:man 包=切片最小闭包(script/ 投影);cas 包=slice_native 全工程投影(厂商参照闭包+生成体)。闭包规模差为打包形态差异;同名文件字节差集中于 Import/TestCase_SGP_23.js(TC 入口本体)。

4.1 入口代码对照

  • 行数:man 241 / cas 724;字符:man 9150 / cas 73028
  • man 顶层调用 Top:[["TestStepStart2", 42], ["TraceStart", 6], ["ResetCard", 6], ["TS_TERMINAL_CAPABILITY_cmd", 6], ["TS_MANAGE_CHANNEL_OPEN", 6], ["TS_SELECT", 6], ["RSP_profile_load_procedure_LPAd", 6], ["ES10b_GetEUICCInfo1", 6], ["ES10b_AuthenticateServer", 6], ["RecoverCard", 6]]
  • cas bind 调用:[["checkData", 116], ["sendApdu", 14], ["resetAndAtr", 1], ["runToSteadyState", 1], ["sendTerminalProfile", 1], ["manageChannelOpen", 1]]
方言映射对命中数
ResetCard() ↔ bind.resetAndAtr()6
TS_*_cmd() ↔ bind.* 命令封装18
unified diff(截断预览)
--- man
+++ cas
@@ -1,240 +1,723 @@
-// slice of Import\TestCase_SGP_23.js - cases: TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_Error_With_Incorrect_SM_DSauth_certificate + TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_02_Error_With_Invalid_SM_DS_Signature + TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_03_Error_Unsupported_Curve + TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_04_Error_eUICC_Challenge_Mismatch + TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_05_Error_Unknown_CI_PK + TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_06_Error_No_RSP_session_on_going (extracted verbatim)
-
-function TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_Error_With_Incorrect_SM_DSauth_certificate()
-{
-
-	tracenamestr = "测试目的:执行AuthenticateServer指令,使用错误的SM-DSauth证书(如 签名无效)";
-	curDis.TraceStart(sno++,tracenamestr);
-
-	curDis.TestStepStart2(stno++,"复位;");
-	ResetCard();
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送Terminal Capability命令;");
-	TS_TERMINAL_CAPABILITY_cmd();
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送MANAGE_CHANNEL命令,打开辅助逻辑通道;");
-	TS_MANAGE_CHANNEL_OPEN();
-
-	curLogicChannel = 1;
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送SELECT命令,选择ISD-R;");
-	TS_SELECT("Select ISD",ISD_R_AID,"9000");
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令,执行GetEuiccInfo1Request;");
-	pkId_CI_ForVerification = pkId_CI_ECDSA_BRP;
-	pkId_CI_ForSigning = pkId_CI_ECDSA_BRP;
-	var Profile_load_procedure = new RSP_profile_load_procedure_LPAd(PROFILE_OPERATIONAL1_DATA);
-	Profile_load_procedure.ICCID = ICCID_OP_PROF1;
-	Profile_load_procedure.ES10b_GetEUICCInfo1();
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令,执行GetEuiccChallengeRequest;");
-	Profile_load_procedure.ES10b_GetEUICCChallenge();
-
-
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令,执行AuthenticateServerRequest;");
-	Profile_load_procedure.isErrorTest = true;
-	euiccAuthenticateErrorCode = AuthenticateErrorCode.invalidCertificate;
-	Profile_load_procedure.DPauthInforObj.Cert = CERT_S_SM_DSauth_INV_SIGN_BRP;
-	Profile_load_procedure.ES10b_AuthenticateServer();
-
-	RecoverCard();
+// Author: 卡思Cas智能体
+// Date: 20261004-021953
+// Function: (purpose 原文未由 SGP.23 该 TC 提供,corpus vacuum 登记)TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases,Test Sequence #01-#06 Error(本 TC 全部 6 条 Test Sequence 合并展开),适用性 M。
+// Test points: ICH-IC1-K1-C1 ATR_present;ICH-IC1-K2-C2 FCP_Template;ICH-IC1-K2-C4 SW
+//   ICH-IC1-K3-C4 SW;ICH-IC1-K4-C4 final SW;ICH-IC2-K1-C4 SW;ICH-IC2-K1-C3 CHANNEL_NUMBER extracted
+//   ICH-IC2-K2-C4 SW;S1-C1 SW;S1-C2 R_EUICC_INFO1 outer tag
+//   S1-C2 R_EUICC_INFO1 required members present;S2-C1 SW;S2-C2 R_CHALLENGE outer tag
+//   S2-C2 R_CHALLENGE required members present;S2-C2 tagOfeuiccChallenge
+//   S2-C2 lengthOfeuiccChallenge;S4-C1 SW;S4-C2 structure_error;S4-C3 transactionId echo
+//   S4-C2 R_AUTH_SERVER_INV_CERT authenticateResponseError structure
+//   S4-C2 authenticateErrorCode invalidCertificate;S5-C1 SW;S5-C2 R_EUICC_INFO1 outer tag
+//   S5-C2 R_EUICC_INFO1 required members present;S6-C1 SW;S6-C2 R_CHALLENGE outer tag
+//   S6-C2 R_CHALLENGE required members present;S6-C2 tagOfeuiccChallenge
+//   S6-C2 lengthOfeuiccChallenge;S8-C1 SW;S8-C2 structure_error;S8-C3 transactionId echo
+//   S8-C2 R_AUTH_SERVER_INV_SIGN authenticateResponseError structure
+//   S8-C2 authenticateErrorCode invalidSignature;S9-C1 SW;S9-C2 R_EUICC_INFO1 outer tag
+//   S9-C2 R_EUICC_INFO1 required members present;S10-C1 SW;S10-C2 R_CHALLENGE outer tag
+//   S10-C2 R_CHALLENGE required members present;S10-C2 tagOfeuiccChallenge
+//   S10-C2 lengthOfeuiccChallenge;S12-C1 SW;S12-C2 structure_error;S12-C3 transactionId echo
+//   S12-C2 R_AUTH_SERVER_INV_CURV authenticateResponseError structure
+//   S12-C2 authenticateErrorCode unsupportedCurve;S13-C1 SW;S13-C2 R_EUICC_INFO1 outer tag
+//   S13-C2 R_EUICC_INFO1 required members present;S14-C1 SW;S14-C2 R_CHALLENGE outer tag
+//   S14-C2 R_CHALLENGE required members present;S14-C2 tagOfeuiccChallenge
+//   S14-C2 lengthOfeuiccChallenge;S16-C1 SW;S16-C2 structure_error;S16-C3 transactionId echo
+//   S16-C2 R_AUTH_SERVER_INV_CHALLENGE authenticateResponseError structure
+//   S16-C2 authenticateErrorCode euiccChallengeMismatch;S17-C1 SW;S17-C2 R_EUICC_INFO1 outer tag
+//   S17-C2 R_EUICC_INFO1 required members present;S18-C1 SW;S18-C2 R_CHALLENGE outer tag
+//   S18-C2 R_CHALLENGE required members present;S18-C2 tagOfeuiccChallenge
+//   S18-C2 lengthOfeuiccChallenge;S20-C1 SW;S20-C2 structure_error;S20-C3 transactionId echo
+//   S20-C2 R_AUTH_SERVER_INV_CI authenticateResponseError structure
+//   S20-C2 authenticateErrorCode ciPKUnknown;S21-C1 SW;S21-C2 R_EUICC_INFO1 outer tag
+//   S21-C2 R_EUICC_INFO1 required members present;S23-C1 SW;S23-C2 structure_error
+//   S23-C3 tid_unchecked;S23-C2 R_AUTH_SERVER_NO_SESSION authenticateResponseError structure
+//   S23-C2 authenticateErrorCode noSessionContext
+//   S23-C3 error transactionId present (any value accepted)
+// 本函数由 CaseIR 4.2.18.2.8 编译生成(4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-20261004_021953,SGP.23 v1.16 × SGP.22 v2.7):字节权威=CaseIR,非誊录黄金脚本。
+// Value-free template: every data byte is injected from CaseIR fields; no scaffold globals (see docs/speconly/compile-symbol-migration.md).
+// 适用性 M:编译期门,运行时由 harness 环境前置承担。
+function TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_06_merged() {
+    var bind = curBind;
+    // Seq#06 附加 (卡态)No RSP session is on-going(未调用 ES10b.GetEUICCChallenge): declared unexpanded (non-PROC row or K corpus vacuum; see CaseIR open_items).
+
+    // IC head inline (initial_conditions → PROC_EUICC_INITIALIZATION_SEQUENCE, K row 1):RESET(K 语料机械展开)
+    var s24 = bind.resetAndAtr();
+    bind.checkData("ICH-IC1-K1-C1 ATR_present", "1", s24.atr_hex !== "" ? "1" : "0");
+
+    // IC head inline (initial_conditions → PROC_EUICC_INITIALIZATION_SEQUENCE, K row 2):SELECT_MF(K 语料机械展开)
+    // FCP outer tag not materialized from clause: tag-face asserted only when corpus fixes the tag byte (e.g. TS 102 221 FCP '62').
+    var s25 = bind.sendApdu("00", "A4", "00", "04", "3F00", "00", "9000");
+    bind.checkData("ICH-IC1-K2-C2 FCP_Template", "1", s25.resp.length > 0 ? "1" : "0");
+    bind.checkData("ICH-IC1-K2-C4 SW", "9000", s25.sw);
+
+    // IC head inline (initial_conditions → PROC_EUICC_INITIALIZATION_SEQUENCE, K row 3):TERMINAL_CAPABILITY_LPAd(K 语料机械展开)
+    var s26 = bind.sendApdu("80", "AA", "00", "00", "A9058100830107", null, "9000");
+    bind.checkData("ICH-IC1-K3-C4 SW", "9000", s26.sw);
+
+    // IC head inline (initial_conditions → PROC_EUICC_INITIALIZATION_SEQUENCE, K row 4):TERMINAL_PROFILE(K 语料机械展开)
+    var steady27 = bind.runToSteadyState(function () {
+        return bind.sendTerminalProfile("FFFFFFFF7F9D00DFBF00001FE2000000C7EB0000000168005000000000000200", "9000");
+    });
+    bind.checkData("ICH-IC1-K4-C4 final SW", "9000", steady27.final.sw);
+
+    // IC head inline (initial_conditions → PROC_OPEN_LOGICAL_CHANNEL_AND_SELECT_ISDR, K row 1):MANAGE_CHANNEL_OPEN(K 语料机械展开)
+    // CHANNEL_NUMBER extraction and dynamic CLA rebinding are CasBind internal state (chaining rule; no generated-code re-implementation).
+    var s28 = bind.manageChannelOpen("9000");
+    bind.checkData("ICH-IC2-K1-C4 SW", "9000", s28.sw);
+    bind.checkData("ICH-IC2-K1-C3 CHANNEL_NUMBER extracted", "1", s28.chan !== null ? "1" : "0");
+
+    // IC head inline (initial_conditions → PROC_OPEN_LOGICAL_CHANNEL_AND_SELECT_ISDR, K row 2):MTD_SELECT(K 语料机械展开)
+    // CLA = bound channel (cla_rule) and <L> length binding are CasBind internal state (chaining rule; no generated-code re-implementation).
+    var s29 = bind.sendApdu(null, "A4", "04", "00", "A0000005591010FFFFFFFF8900000100", null, "9000");
+    // MTD_SELECT expected face is SW-only (K Annex C.2 open-channel procedure step 2: no FCI content assertion in corpus); no fabricated template parse.
+    bind.checkData("ICH-IC2-K2-C4 SW", "9000", s29.sw);
+
+    // 步骤 1:Seq#01] MTD_STORE_DATA(tc_step)
+    // <L> length binding and the conditional 61XX + GET RESPONSE chain (D.4.2) are CasBind internal state (chaining rule).
…(差异行超限,共 965 行,此处截断)
### 4.2 UCE/命名对照
  • man:ESIM_TEST_SGP_23.UCE;入口 [('TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_Error_With_Incorrect_SM_DSauth_certificate', 'TC_EUICC_ES10B.AuthenticateServer_SM-DS_ErrorCases', 'Import\\\\ExecuteTestCase_SGP_23.js(TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_Error_With_Incorrect_SM_DSauth_certificate)')];参数 {"ReaderName": "Identiv SCR35xx USB Smart Card Reader 0"}
  • cas:TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases.uce;入口 [('TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_06_merged', 'TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases', 'Import\\\\ExecuteTestCase_spec.js(TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_06_merged)')];参数 {"ReaderName": "Identiv SCR35xx USB Smart Card Reader 0"}

5. L2 步骤/APDU/step_map 差异(结构化对齐)

  • 命令计数:man 40 / cas 57;精确对齐 5,核心(CLA·INS·P1·P2·Lc)同 8,man-only 27,cas-only 44
#-man-cas对齐
1@RESET@RESETexact
280AA000007A905810083013780AA000007A9058100830107core_same
300700000010070000001exact
401A4040010A0000005591010FFFFFFFF890000010001A4040010A0000005591010FFFFFFFF8900000100exact
501C000002101C0000021exact
681E2910003BF200081E2910003BF200000core_same
781E2910003BF2E0081E2910003BF2E0000core_same
801C000001A01C000001Aexact
981E2910003BF200081E2910003BF200000core_same
1081E2910003BF2D0081E2910003BF2E0000core_same
1181E2910003BF280081E2910003BF200000core_same
1281E2910003BF280081E2910003BF2E0000core_same
1381E2910003BF2B0081E2910003BF200000core_same
—man-only: 0070000000, 01C00000A9, 01C0000015, 81E21100FFBF388202F13049801050DC63CEECF3…C075253, 81E21101FF5054455354310B3009060355040613…8AE0108, 81E29102F8F01DEF548ED9859714DD48300E0603…3000010, @RESET, 00A40004023F00, 00C0000020, 80AA000007A9058100830137, 8010000023FFFFFFFF7F9D00DFBF00001FE20000…0000038, 801200000F
—cas-only: 00A40004023F0000, 00C0000020, 8010000020FFFFFFFF7F9D00DFBF00001FE20000…0000200, 801200000F, 801400000C810301250082028281830100, 81C00000A9, 81C0000015, 01E21100FFBF3882032F3051801077859B7E9A02…40A0C00, 01E21101FF0752535054455354310B3009060355…B258A00, 01E21102FFFB61388B3FF2EE6A61E2C44D72300E…7452D00, 01E29103375438373739A130800400000000A128…2010000, 81C00000A9

6. L3 规范字段/Expected/REQ/通过条件差异

  • spec:/Users/yuhu/cas/原料/切片/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases/spec_intl/SGP.23-v1.16_4.2.18_AuthenticateServer_SM-DS_ErrorCases.md(风格:mapping);caseir:/Users/yuhu/cas/experiments/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-20261004_021953/caseir_materialized_gate.json

spec_intl 为人工核订映射表风格(规范步骤 ↔ 厂商脚本实现 ↔ 实跑结果):

规范步骤man 脚本实现man 实跑结果
IC1 PROC_EUICC_INITIALIZATION_SEQUENCEResetCard()(L10)→ TS_TERMINAL_CAPABILITY_cmd()(L13)通过(步骤 1-2=APDU3/6,复位成功+ATR 3B9D96… 在案(APDU4/5),TC SW=9000)
IC2 PROC_OPEN_LOGICAL_CHANNEL_AND_SELECT_ISDRTS_MANAGE_CHANNEL_OPEN()(L16)→ `TS_SELECT("Select ISD",ISD_R_AID,"90通过(步骤 3-4=APDU11/17,通道 01+ISD-R 9000,FCI 含 8203020500=RSP V2.5(APDU19)
1 #GET_EUICC_INFO1BRP CI 注入 pkId_CI_ForVerification/ForSigning=pkId_CI_ECDSA_BRP(L24-2通过(步骤 5=APDU23,R_EUICC_INFO1 SW=9000;euiccCiPKIdListForVerification=[F
2 #GET_EUICC_CHALLENGEES10b_GetEUICCChallenge()(L31)通过(步骤 6=APDU29,R_CHALLENGE SW=9000,挑战 0001…0E0F(APDU31))
3 组装:#CERT_S_SM_DSauth_INV_SIGN(同根 CI、签名无效)isErrorTest=true(L36)+`euiccAuthenticateErrorCode=invalidCertificate通过(缺陷证书随请求 BF388202F1 下发(APDU37-55),载荷含 CN="TEST SM-DS" INV_SIGN 证书体)
4 MTD_STORE_DATA_SCRIPT(#AUTH_SMDS_INV_CERT) → #R_AUTH_SERVER_INV_CERT+SW=0x9000ES10b_AuthenticateServer()(L39)通过(步骤 7=APDU35 起;响应 BF3817 A1 15=authenticateResponseError(APDU5
4 断言:AuthenticateResponseError 中 S_TRANSACTION_ID 与请求相同过程库错误分支解析+raw 字节比对通过(字节级:请求 8010 50DC63CEECF3CE770904D3C2A4AAE196(APDU37/41)↔ 错误响应
4 断言:错误码语义(规范表 202 未锁值;SGP.22 L9094 枚举 invalidCertificate=1)AuthenticateErrorCode 检查(过程库)通过(期望值: 01=实际值: 01(APDU61/62)=invalidCertificate(1),与注入载体 INV_SIGN
(收尾,非规范步骤)RecoverCard()(L41)通过(Transaction 2 APDU63-168:复位→MemoryReset→profile 列表归空→通知面 BF28/BF2B

cas CaseIR 步骤/检查:

步动作checksREQ
1[Seq#01] MTD_STORE_DATA (#GET_EUICC_INFO1)["S1-C1", "S1-C2"][]
2[Seq#01] MTD_STORE_DATA (#GET_EUICC_CHALLENGE)["S2-C1", "S2-C2"][]
3[Seq#01] Step4 输入准备(InitiateAuthentication):设 <EUICC_CI_PK_ID_TO_BE_US[][]
4[Seq#01] MTD_STORE_DATA_SCRIPT (#AUTH_SMDS_INV_CERT)["S4-C1", "S4-C2", "S4-C3"]["RQ45_028", "RQ57_100", "RQ31_052", "RQ57_095", "RQ57_105", "RQ57_107", "RQ26_010"]
5[Seq#02] MTD_STORE_DATA (#GET_EUICC_INFO1)["S5-C1", "S5-C2"][]
6[Seq#02] MTD_STORE_DATA (#GET_EUICC_CHALLENGE)["S6-C1", "S6-C2"][]
7[Seq#02] Step4 输入准备(InitiateAuthentication):<S_SMDS_SIGNATURE1> 不以 #SK[][]
8[Seq#02] MTD_STORE_DATA_SCRIPT (#AUTHENTICATE_SMDS)["S8-C1", "S8-C2", "S8-C3"]["RQ57_100", "RQ31_052", "RQ57_097", "RQ57_105", "RQ57_107", "RQ31_049", "RQ26_010"]
9[Seq#03] MTD_STORE_DATA (#GET_EUICC_INFO1)["S9-C1", "S9-C2"][]
10[Seq#03] MTD_STORE_DATA (#GET_EUICC_CHALLENGE)["S10-C1", "S10-C2"][]
11[Seq#03] Step4 输入准备(InitiateAuthentication):serverSignature1 用 <RANDOM[][]
12[Seq#03] MTD_STORE_DATA_SCRIPT (#AUTH_SMDS_INV_CURV)["S12-C1", "S12-C2", "S12-C3"]["RQ57_100", "RQ31_052", "RQ57_105", "RQ57_107", "RQ26_010"]
13[Seq#04] MTD_STORE_DATA (#GET_EUICC_INFO1)["S13-C1", "S13-C2"][]
14[Seq#04] MTD_STORE_DATA (#GET_EUICC_CHALLENGE)["S14-C1", "S14-C2"][]
15[Seq#04] Step4 输入准备(InitiateAuthentication):serverSigned1.euiccChallen[][]
16[Seq#04] MTD_STORE_DATA_SCRIPT (#AUTH_SMDS_INV_CHALLENGE)["S16-C1", "S16-C2", "S16-C3"]["RQ57_100", "RQ31_052", "RQ57_098", "RQ57_105", "RQ57_107", "RQ31_050", "RQ26_010"]
17[Seq#05] MTD_STORE_DATA (#GET_EUICC_INFO1)["S17-C1", "S17-C2"][]
18[Seq#05] MTD_STORE_DATA (#GET_EUICC_CHALLENGE)["S18-C1", "S18-C2"][]
19[Seq#05] Step4 输入准备(InitiateAuthentication):<EUICC_CI_PK_ID_TO_BE_USED[][]
20[Seq#05] MTD_STORE_DATA_SCRIPT (#AUTHENTICATE_SMDS)["S20-C1", "S20-C2", "S20-C3"]["RQ26_029", "RQ45_028", "RQ57_100", "RQ31_052", "RQ57_099", "RQ57_105", "RQ57_107", "RQ31_051", "RQ31_048", "RQ26_010"]
21[Seq#06] MTD_STORE_DATA (#GET_EUICC_INFO1)["S21-C1", "S21-C2"][]
22[Seq#06] Step3 输入准备:<S_TRANSACTION_ID>、#S_EUICC_CHALLENGE、<S_SMDS_CHAL[][]
23[Seq#06] MTD_STORE_DATA_SCRIPT (#AUTH_SMDS_INV_CHALLENGE)["S23-C1", "S23-C2", "S23-C3"]["RQ57_100", "RQ31_052", "RQ57_094", "RQ57_105", "RQ57_107"]

6.1 充分性分析(启发式,不作最终裁定)

  • cas:NO_MECHANICAL_GAPS(全步有检查=True;REQ 全覆盖=False;ErrorCount==0=False)
  • cas 物化核对(启发式旁证,权威见下行 attestation):声明检查 40 项 / 生成体 checkData 116 次 / S 标号重合 40 / 计数缺口 0 / 形态 FULL;执行面 FAIL(计数缺口须结合绑定层隐含断言核验,非直接判缺陷)
  • cas 编译器自证(check_attestation,同批构建):声明 None = js 48 + binding 0 + gap 0;缺口判定以本行为权威(启发式计数仅旁证)
  • man:映射行 9;TTR 期望/实际回声 64;厂商工具内置审计(TTR 期望/实际回声行为证据);脚本字节级充分性不可完全外部验证
  • cas 信息步(无线上断言义务):[3, 7, 11, 15, 19, 22]
  • REQ 声明面 vs caseir 引用面差异(9 项,非等价缺口判定):['RQ26_005/006/007/008/010/012/013/029/033/034/035', 'RQ31_025/046-055/076-079', 'RQ36_017', 'RQ42_001', 'RQ43_001/002', 'RQ45_002/006/026/026_1/028/030/032', 'RQ55_004/005', 'RQ57_093-108)', '§4.2.18.1 全集']
  • caseir open_items:
  • Seq#06 Initial Condition「无 RSP session」须由编排保证(本序列不发 GetEUICCChallenge)
  • 无效证书 #CERT_S_SM_DSauth_INV_SIGN / #CERT_S_SM_DSauth_INV_CURVE 字节来自 SGP.26 捆绑,不在输入包
  • 每条 Test Sequence 执行后须按 2.2.2 执行 clean-up(CU)恢复 Common Initial State
  • R2 残余占位:命令数据已按 S22_auth_srv 闭合为模板字面量;<S_TRANSACTION_ID>/<EUICC_CHALLENGE>/服务器 challenge/签名 为 G_annexB 运行时动态值,serverCertificate 字节在 SGP.26 捆绑不在输入包,DeviceInfo 内层标签与 SubjectKeyIdentifier/Certificate 编码标签语料缺席(保守占位),各 <L_*> 长度随动态值定,分块 P1/P2 逐块值运行时定
  • CtxParams1 CHOICE 备选项按语料(S22_auth_srv :71)无显式标签 → 承载 SEQUENCE 标签 30 编码;若 SGP.22 原文该备选带显式标签则为语料漂移点,回原件裁定
  • 【B-5 闭合登记 2026-10-04】CtxParams1 30→A0 与 matchingId 0C→80 漂移已按上条裁定修复(RSPDefinitions AUTOMATIC TAGS + 黄金切片线缆 + vendor RSP_Obj tag 表三源对账);多占位模板经 dynamic_templates/dynamic_template 声明面机械闭合(fail-closed 合同,未声明占位仍拒编);F S_DEVICE_INFO_IMEI 的 '01000'H 五奇尼 typo 按 010000(3B VersionType)读(vendor TestStep.js:266 实证)。

7. 分类结论(封闭枚举)

轴计数说明
RUN_DIFF1man 通过 / cas 失败
SCRIPT_DIALECT125闭包文件差:man-only 3 / cas-only 51;命令序列差:man-only 27 / cas-only 44
GEN_DIFF9REQ 覆盖缺口:['RQ26_005/006/007/008/010/012/013/029/033/034/035', 'RQ31_025/046-055/076-079', 'RQ36_017', 'RQ42_001', 'RQ43_001/002', 'RQ45_002/006/026/026_1/028/030/032', 'RQ55_004/005', 'RQ57_093-108)', '§4.2.18.1 全集']
  • 置信度:heuristic;需人工复核:False

8. 证据路径

  • man 包:../packages/man/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-man.zip
  • man TTR:/Users/yuhu/cas/原料/切片/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases/logs/20260908_222939_ok/result/ESIM_TEST_SGP_23/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_Error_With_Incorrect_SM_DSauth_certificate.ttr
  • cas 包/源:../packages/cas/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-cas.zip
  • cas TTR:/Users/yuhu/cas/experiments/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-20261004_021953/logs/30b510826dba481386c9343432026699/result/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases/TC_eUICC_ES10b_AuthenticateServer_SM_DS_ErrorCases_01_06_merged.ttr
  • spec_intl:/Users/yuhu/cas/原料/切片/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases/spec_intl/SGP.23-v1.16_4.2.18_AuthenticateServer_SM-DS_ErrorCases.md
  • caseir:/Users/yuhu/cas/experiments/4.2.18.2.8-TC_eUICC_ES10b.AuthenticateServer_SM-DS_ErrorCases-20261004_021953/caseir_materialized_gate.json
  • step_map:—